General
- Target 2026-07-02_158e54e3dc8e9983bffad782a0b52754_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 710KB
- Sample260702-sm717agy2y
- SHA256 86cf3ff86e6f4c19ed2529b289529fc734086c625e75c7a6fa0cc0ab5e7d7e6d
- MD5 158e54e3dc8e9983bffad782a0b52754
- SHA1 258cf9fec2fe36989d40d47fffdab4c04e5d8f45
- SHA512 fb7aa5dacd7a2d2d8a316100ad732c6fd932d163e18471d2736c93a81c6dbc30f9d04d6a51f22eb52dc6f97d8c4173a06bb77f0b3b1290b6c3f96df8200cbd3b
- SSDEEP 12288:Cmhj3dUlzn3DSudvsh8Awf3XFaZmBITVJPtSrE37yG2LmxZ:1hLalj3DSudvGM3MXTVhtSQWGtxZ
- TLSH T154F41221B1948072F06351308AB9D7B18B2FBD625BB890DF778805AE1E716E5DF3436B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-02_158e54e3dc8e9983bffad782a0b52754_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_158e54e3dc8e9983bffad782a0b52754_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 710KB
- SHA256 86cf3ff86e6f4c19ed2529b289529fc734086c625e75c7a6fa0cc0ab5e7d7e6d
- MD5 158e54e3dc8e9983bffad782a0b52754
- SHA1 258cf9fec2fe36989d40d47fffdab4c04e5d8f45
- SHA512 fb7aa5dacd7a2d2d8a316100ad732c6fd932d163e18471d2736c93a81c6dbc30f9d04d6a51f22eb52dc6f97d8c4173a06bb77f0b3b1290b6c3f96df8200cbd3b
- SSDEEP 12288:Cmhj3dUlzn3DSudvsh8Awf3XFaZmBITVJPtSrE37yG2LmxZ:1hLalj3DSudvGM3MXTVhtSQWGtxZ
- TLSH T154F41221B1948072F06351308AB9D7B18B2FBD625BB890DF778805AE1E716E5DF3436B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Reflective DLL injection artifacts
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory