General
- Target 2026-07-01_79a01e36b40bff0dc212d5d6ad82c551_coinminer_darkgate_elex_glassworm_remcos_stop_swisyn_wannacry
- Size 6.1MB
- Sample260701-16splsgz2x
- SHA256 a93e5db802467a9b73cecd896e1eabcc7fdab3ae2dbae2753487b2d2e7fafb59
- MD5 79a01e36b40bff0dc212d5d6ad82c551
- SHA1 e01502c2d93b34119ba6cd55d42f23142f8f45a4
- SHA512 c4159d3fbf91d0d6621ac717bf9f86e076d1bd258d41badca7bf69d4e075eaeb759973c0af642a7d7dc5f0d69512361351d2de08444ef546e7d5df576bef5ecf
- SSDEEP 98304:LRu8XUkJiYrBZaUPh8g8E9PUmwN0WatsI+YjgIqLqHY7feFOh7s0s8AY:L48SSh8BBmMItsZYnqLjqOxCzY
- TLSH T1DE56C003A7D68035F8F345B45A7A526A5A26BE311734C0CBA2C81D4E5FF29E27D32727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_79a01e36b40bff0dc212d5d6ad82c551_coinminer_darkgate_elex_glassworm_remcos_stop_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_79a01e36b40bff0dc212d5d6ad82c551_coinminer_darkgate_elex_glassworm_remcos_stop_swisyn_wannacry.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_79a01e36b40bff0dc212d5d6ad82c551_coinminer_darkgate_elex_glassworm_remcos_stop_swisyn_wannacry
- Size 6.1MB
- SHA256 a93e5db802467a9b73cecd896e1eabcc7fdab3ae2dbae2753487b2d2e7fafb59
- MD5 79a01e36b40bff0dc212d5d6ad82c551
- SHA1 e01502c2d93b34119ba6cd55d42f23142f8f45a4
- SHA512 c4159d3fbf91d0d6621ac717bf9f86e076d1bd258d41badca7bf69d4e075eaeb759973c0af642a7d7dc5f0d69512361351d2de08444ef546e7d5df576bef5ecf
- SSDEEP 98304:LRu8XUkJiYrBZaUPh8g8E9PUmwN0WatsI+YjgIqLqHY7feFOh7s0s8AY:L48SSh8BBmMItsZYnqLjqOxCzY
- TLSH T1DE56C003A7D68035F8F345B45A7A526A5A26BE311734C0CBA2C81D4E5FF29E27D32727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2