General
- Target 2026-07-08_4d2e416946f5e5643a9529fa5f98e3f9_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- Sample260708-fa6ldaaz8y
- SHA256 7c77ea8d96fc03a282be2d8d1ece1104004bdddac8243f6888d0e9397718eab8
- MD5 4d2e416946f5e5643a9529fa5f98e3f9
- SHA1 bfd572ca6fc44b9e6853b98254e93a6c5a3960a3
- SHA512 a27ec08d5465a5e5143c7819803742fbf59c46ceab2894ac08e32f4c5181acb1d2580dea155adaf1a0896bfa9fa088ef3554b742da54c55c8109292abe4cdc3e
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5LA:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5E
- TLSH T10627331233EA9475D1A20571DA79D3AA58BBBD310732D4CBB3D5056E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_4d2e416946f5e5643a9529fa5f98e3f9_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_4d2e416946f5e5643a9529fa5f98e3f9_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_4d2e416946f5e5643a9529fa5f98e3f9_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- SHA256 7c77ea8d96fc03a282be2d8d1ece1104004bdddac8243f6888d0e9397718eab8
- MD5 4d2e416946f5e5643a9529fa5f98e3f9
- SHA1 bfd572ca6fc44b9e6853b98254e93a6c5a3960a3
- SHA512 a27ec08d5465a5e5143c7819803742fbf59c46ceab2894ac08e32f4c5181acb1d2580dea155adaf1a0896bfa9fa088ef3554b742da54c55c8109292abe4cdc3e
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5LA:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5E
- TLSH T10627331233EA9475D1A20571DA79D3AA58BBBD310732D4CBB3D5056E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.