General
- Target 2026-06-29_b10138b19bd72e600d55293d3659cb84_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.8MB
- Sample260630-fffl5sft4p
- SHA256 0ac3702d1adc5547e98a9a8724ce1fd0d8ef038353e8d53806961c5e6c508901
- MD5 b10138b19bd72e600d55293d3659cb84
- SHA1 57c8500b249d6c849c98d683f8429eaa40a3533f
- SHA512 85c49df897ee281821c4e4d8eb1abbc13dbd55079cda7ca3978292c4bbcc0d393ff4afd64b8a0cd0ae7a66df776b73031d652b6058371b90d404f30914ffed04
- SSDEEP 393216:c0ixLfYIhU8z7zhff4E3npAdHALcdHwnPp/QgEUcE4up62i++3w10hokD:Ixj3mE7P3pSHAEQnPt9c1h21+gahrD
- TLSH T1D227331177E69435D1620570D6BA936F59BBFD324622C4CBB3C5096E8A35AC28C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b10138b19bd72e600d55293d3659cb84_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b10138b19bd72e600d55293d3659cb84_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b10138b19bd72e600d55293d3659cb84_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.8MB
- SHA256 0ac3702d1adc5547e98a9a8724ce1fd0d8ef038353e8d53806961c5e6c508901
- MD5 b10138b19bd72e600d55293d3659cb84
- SHA1 57c8500b249d6c849c98d683f8429eaa40a3533f
- SHA512 85c49df897ee281821c4e4d8eb1abbc13dbd55079cda7ca3978292c4bbcc0d393ff4afd64b8a0cd0ae7a66df776b73031d652b6058371b90d404f30914ffed04
- SSDEEP 393216:c0ixLfYIhU8z7zhff4E3npAdHALcdHwnPp/QgEUcE4up62i++3w10hokD:Ixj3mE7P3pSHAEQnPt9c1h21+gahrD
- TLSH T1D227331177E69435D1620570D6BA936F59BBFD324622C4CBB3C5096E8A35AC28C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.