General
- Target 2026-07-09_e1fee26cd7adef33e8f6ff7dd4f9e703_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.4MB
- Sample260709-b7n1dact81
- SHA256 cdb9712fc99d5f04dd7ce8831d1f55cb2d8b3164e5adfc11f7f450b31e43fb6a
- MD5 e1fee26cd7adef33e8f6ff7dd4f9e703
- SHA1 3c50b784e92bf08738f3e3f44b41cca3170298ec
- SHA512 d37add3a79604123c5095df33809c0e51f70d97fcda6c95ba7e620316fc2fa337fae0bb345e37ba769f76bd15e25bb0371582fa65a1cf0a34e96bf8447462841
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5LB:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5F
- TLSH T16B27331237EA9435D1620671DA79D3AB58BBBD310732D4CBA3D5056E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-09_e1fee26cd7adef33e8f6ff7dd4f9e703_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_e1fee26cd7adef33e8f6ff7dd4f9e703_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e1fee26cd7adef33e8f6ff7dd4f9e703_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.4MB
- SHA256 cdb9712fc99d5f04dd7ce8831d1f55cb2d8b3164e5adfc11f7f450b31e43fb6a
- MD5 e1fee26cd7adef33e8f6ff7dd4f9e703
- SHA1 3c50b784e92bf08738f3e3f44b41cca3170298ec
- SHA512 d37add3a79604123c5095df33809c0e51f70d97fcda6c95ba7e620316fc2fa337fae0bb345e37ba769f76bd15e25bb0371582fa65a1cf0a34e96bf8447462841
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5LB:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5F
- TLSH T16B27331237EA9435D1620671DA79D3AB58BBBD310732D4CBA3D5056E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.