General
- Target 2026-07-08_3442b72d8dad98e55792e1989deedd71_coinminer_darkgate_elex_glassworm_redline-stealer_stop
- Size 18.4MB
- Sample260708-ww4a5sfx2v
- SHA256 e95163dc8e3d7403671e997f2e90ff84e46f2fbe550f69ddf2a265c5d6c93587
- MD5 3442b72d8dad98e55792e1989deedd71
- SHA1 40e10c5318ad004a8012caaf4cfabb479672eb8b
- SHA512 44d56e47ef7125b9a158a1da3f7e1ccce3b6d1770c786af869d4044451622f6e7ad62425d592d7da9f2b8afac70bde3c464abc4e2a6dbd38005b9517d0548722
- SSDEEP 393216:4o0l8D4Xed+cZT9zilbqRFIdcx6A40VMfw2i3ZzbIdnOwOD2i:4o0l8D4+J3DRFIix69QMQ4cwq2i
- TLSH T12217F123E6C28076E4A321F2867BA76FA4B8A730073494CB67C45C55B7757D1AA3234F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_3442b72d8dad98e55792e1989deedd71_coinminer_darkgate_elex_glassworm_redline-stealer_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_3442b72d8dad98e55792e1989deedd71_coinminer_darkgate_elex_glassworm_redline-stealer_stop.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_3442b72d8dad98e55792e1989deedd71_coinminer_darkgate_elex_glassworm_redline-stealer_stop
- Size 18.4MB
- SHA256 e95163dc8e3d7403671e997f2e90ff84e46f2fbe550f69ddf2a265c5d6c93587
- MD5 3442b72d8dad98e55792e1989deedd71
- SHA1 40e10c5318ad004a8012caaf4cfabb479672eb8b
- SHA512 44d56e47ef7125b9a158a1da3f7e1ccce3b6d1770c786af869d4044451622f6e7ad62425d592d7da9f2b8afac70bde3c464abc4e2a6dbd38005b9517d0548722
- SSDEEP 393216:4o0l8D4Xed+cZT9zilbqRFIdcx6A40VMfw2i3ZzbIdnOwOD2i:4o0l8D4+J3DRFIix69QMQ4cwq2i
- TLSH T12217F123E6C28076E4A321F2867BA76FA4B8A730073494CB67C45C55B7757D1AA3234F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.