General
- Target 2026-06-28_e5eeb55ea40b06d9aae6e50e6e3f528a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.8MB
- Sample260630-raq2gagw4s
- SHA256 303d0a1151a0325e150f2ec68e6ea333e45b21db8858d4c9c89eb951052f973f
- MD5 e5eeb55ea40b06d9aae6e50e6e3f528a
- SHA1 1472f33ddffaf1a8bf6de489a572c28fa6d2d2f9
- SHA512 55c99ac70dbc2ea6b1746e87958fe04c321e63754300d77dfaf90c738ec21d4ae3c2b4fd4b3ecdb155bcb3f27d9efbb2c754bb90d08a1bbd935d73adab193ee0
- SSDEEP 393216:c0ixLfYIhU8z7zhff4E3npAdHALcdHwnPp/QgEUcE4up62i++3w10hokMD:Ixj3mE7P3pSHAEQnPt9c1h21+gahrMD
- TLSH T1E627331177E68435D1620570D6BA936F59BBFD325622C4CBB3C5096E8A35AC28C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-28_e5eeb55ea40b06d9aae6e50e6e3f528a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_e5eeb55ea40b06d9aae6e50e6e3f528a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_e5eeb55ea40b06d9aae6e50e6e3f528a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.8MB
- SHA256 303d0a1151a0325e150f2ec68e6ea333e45b21db8858d4c9c89eb951052f973f
- MD5 e5eeb55ea40b06d9aae6e50e6e3f528a
- SHA1 1472f33ddffaf1a8bf6de489a572c28fa6d2d2f9
- SHA512 55c99ac70dbc2ea6b1746e87958fe04c321e63754300d77dfaf90c738ec21d4ae3c2b4fd4b3ecdb155bcb3f27d9efbb2c754bb90d08a1bbd935d73adab193ee0
- SSDEEP 393216:c0ixLfYIhU8z7zhff4E3npAdHALcdHwnPp/QgEUcE4up62i++3w10hokMD:Ixj3mE7P3pSHAEQnPt9c1h21+gahrMD
- TLSH T1E627331177E68435D1620570D6BA936F59BBFD325622C4CBB3C5096E8A35AC28C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.