General
- Target 2026-06-29_ddd886e861d3c7147fdfddc40403ef3d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 13.7MB
- Sample260630-c2d4nacy5v
- SHA256 8edd0bd4b746f19164df0002f0df11d9be08eac75b5f8ecfeb543a1c0ac0d340
- MD5 ddd886e861d3c7147fdfddc40403ef3d
- SHA1 806b74c8427a2bb52ef8bc60c7903845eb8a2f76
- SHA512 5144ea2d07ba79adff2e62df07a5ec926b5869340509da470bd249099b6762ad97e6fc3cda4d15d0d8c8b847bb58b345bfc643477a652a23eb13bb267d031cd4
- SSDEEP 393216:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHwnPp/QgE+JX:Txj3mE7P3pS7KZQnPtTN
- TLSH T11AE6331277DA8435E1620575D66AD36B69BAFD320732C4CBB3D9099D4A31AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_ddd886e861d3c7147fdfddc40403ef3d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_ddd886e861d3c7147fdfddc40403ef3d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_ddd886e861d3c7147fdfddc40403ef3d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 13.7MB
- SHA256 8edd0bd4b746f19164df0002f0df11d9be08eac75b5f8ecfeb543a1c0ac0d340
- MD5 ddd886e861d3c7147fdfddc40403ef3d
- SHA1 806b74c8427a2bb52ef8bc60c7903845eb8a2f76
- SHA512 5144ea2d07ba79adff2e62df07a5ec926b5869340509da470bd249099b6762ad97e6fc3cda4d15d0d8c8b847bb58b345bfc643477a652a23eb13bb267d031cd4
- SSDEEP 393216:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHwnPp/QgE+JX:Txj3mE7P3pS7KZQnPtTN
- TLSH T11AE6331277DA8435E1620575D66AD36B69BAFD320732C4CBB3D9099D4A31AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.