General
- Target 2026-07-10_9faa6979b047163768e7a8fad9ff33fd_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 12.0MB
- Sample260710-c9963adv2x
- SHA256 c959598262e579b8b4113bbb8110c996ea67cedee9fce53809fb6f273525310f
- MD5 9faa6979b047163768e7a8fad9ff33fd
- SHA1 945ef20b792d65ea36b31a1da562f49417cba2d7
- SHA512 997e0030642802898233a572bd780287480134fb97cce9e4a5e5864854ff659f612bcbeebe0c89d5a09962c814f508f95265799ef16e6115ca407379ba51dec6
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwna:Jxj3mE7P3pSyrUQna
- TLSH T1A2D6331177DA8435E1620575D669D36B69BAFD321B32C8CBB3D80A5D4A31AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-10_9faa6979b047163768e7a8fad9ff33fd_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_9faa6979b047163768e7a8fad9ff33fd_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_9faa6979b047163768e7a8fad9ff33fd_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 12.0MB
- SHA256 c959598262e579b8b4113bbb8110c996ea67cedee9fce53809fb6f273525310f
- MD5 9faa6979b047163768e7a8fad9ff33fd
- SHA1 945ef20b792d65ea36b31a1da562f49417cba2d7
- SHA512 997e0030642802898233a572bd780287480134fb97cce9e4a5e5864854ff659f612bcbeebe0c89d5a09962c814f508f95265799ef16e6115ca407379ba51dec6
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwna:Jxj3mE7P3pSyrUQna
- TLSH T1A2D6331177DA8435E1620575D669D36B69BAFD321B32C8CBB3D80A5D4A31AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.