General
- Target 2026-07-09_d457fdec1e523b644381f7a355181b06_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.2MB
- Sample260709-b836pacv2v
- SHA256 8ae16787f547ca34061a4a64582a784fa3f8602637dca81a20bee1bb135a5ceb
- MD5 d457fdec1e523b644381f7a355181b06
- SHA1 e0eb10edd36b88e7a5a9cb865093b532baff4f70
- SHA512 bef99e91df0262456fea78210b4599624abd94d4e51e56106b877f46af4cb3cfcc6db99717119e0f185df1c4b580e598d8467f7c219506c862cbf888835d0455
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5L2:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5q
- TLSH T17317331233EA9475D1620571DA79D3AB58BBBD310B32D4CBB2D5056E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-09_d457fdec1e523b644381f7a355181b06_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_d457fdec1e523b644381f7a355181b06_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_d457fdec1e523b644381f7a355181b06_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.2MB
- SHA256 8ae16787f547ca34061a4a64582a784fa3f8602637dca81a20bee1bb135a5ceb
- MD5 d457fdec1e523b644381f7a355181b06
- SHA1 e0eb10edd36b88e7a5a9cb865093b532baff4f70
- SHA512 bef99e91df0262456fea78210b4599624abd94d4e51e56106b877f46af4cb3cfcc6db99717119e0f185df1c4b580e598d8467f7c219506c862cbf888835d0455
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5L2:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5q
- TLSH T17317331233EA9475D1620571DA79D3AB58BBBD310B32D4CBB2D5056E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.