General
- Target 2026-06-30_10436270876c61661a31510725beb78c_amadey_coinminer_darkgate_elex_glassworm_hawkeye_icedid_luca-stealer_metamorfo_njrat_remcos_revil_rhadamanthys_smoke-loader_stop_vidar
- Size 17.7MB
- Sample260701-a225dabw5j
- SHA256 f4a158aedaaa81a989c1f81ba4b9bd759cf018c9b1643c728834b9a54a9de5dc
- MD5 10436270876c61661a31510725beb78c
- SHA1 5aecebaa4d7f3a5289eaf2fd58c5af87e92ba8e2
- SHA512 f307d38c36ac24397ba4551d053afd772bc58040f7d4b6c0bcfa34755a6a6c82b9a7c36400df336b7b277ee2ae92e320dfe53caf432f73e87ba1d0a048abc576
- SSDEEP 196608:0blRaCikfRJgwdtKPx9OCeQ7Lq1bMID+hHcIwhMojN3FLOyomFHKnPKcYk72wESI:0blRRfCLq88JFLcYkqANG6QMQ
- TLSH T1A817CF01B6908075D4B741348AAEE23AE67DBC710B3486CB16D47A6D5F33FD16A38763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_10436270876c61661a31510725beb78c_amadey_coinminer_darkgate_elex_glassworm_hawkeye_icedid_.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_10436270876c61661a31510725beb78c_amadey_coinminer_darkgate_elex_glassworm_hawkeye_icedid_.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_10436270876c61661a31510725beb78c_amadey_coinminer_darkgate_elex_glassworm_hawkeye_icedid_luca-stealer_metamorfo_njrat_remcos_revil_rhadamanthys_smoke-loader_stop_vidar
- Size 17.7MB
- SHA256 f4a158aedaaa81a989c1f81ba4b9bd759cf018c9b1643c728834b9a54a9de5dc
- MD5 10436270876c61661a31510725beb78c
- SHA1 5aecebaa4d7f3a5289eaf2fd58c5af87e92ba8e2
- SHA512 f307d38c36ac24397ba4551d053afd772bc58040f7d4b6c0bcfa34755a6a6c82b9a7c36400df336b7b277ee2ae92e320dfe53caf432f73e87ba1d0a048abc576
- SSDEEP 196608:0blRaCikfRJgwdtKPx9OCeQ7Lq1bMID+hHcIwhMojN3FLOyomFHKnPKcYk72wESI:0blRRfCLq88JFLcYkqANG6QMQ
- TLSH T1A817CF01B6908075D4B741348AAEE23AE67DBC710B3486CB16D47A6D5F33FD16A38763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Impair Defenses: Safe Mode Boot