General
- Target 2026-07-10_8857d342208ab4aa16000c6770066d4e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.6MB
- Sample260710-dbatzsdv4s
- SHA256 a6a1b4c3bba86f73d95d0894726ae2d96524087ab1083b00dfd4bce465553deb
- MD5 8857d342208ab4aa16000c6770066d4e
- SHA1 4037cdeaf96b28407fc2f40329a8bf7b01a30dda
- SHA512 34ba2f15aabca8c0ec633b896dc34564ae53dac8f9f2a45ccab1dad84a9def0857b831d3395a5beeb281bbe2287dc1bfee889512a1787f9a9748b16ec73fe0af
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5Lv:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5r
- TLSH T1CE27331233EA9475D1A20671DA79D3AA58BBBD310732D4CBB3D5055E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-10_8857d342208ab4aa16000c6770066d4e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8857d342208ab4aa16000c6770066d4e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8857d342208ab4aa16000c6770066d4e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.6MB
- SHA256 a6a1b4c3bba86f73d95d0894726ae2d96524087ab1083b00dfd4bce465553deb
- MD5 8857d342208ab4aa16000c6770066d4e
- SHA1 4037cdeaf96b28407fc2f40329a8bf7b01a30dda
- SHA512 34ba2f15aabca8c0ec633b896dc34564ae53dac8f9f2a45ccab1dad84a9def0857b831d3395a5beeb281bbe2287dc1bfee889512a1787f9a9748b16ec73fe0af
- SSDEEP 393216:H0GxLfYIhU8z7zhff4E3npAdyrLcJHwnPp/QgEUc8YVBjDEOnceSbT5Lv:Jxj3mE7P3pSyrUQnPt9c8YzEhbT5r
- TLSH T1CE27331233EA9475D1A20671DA79D3AA58BBBD310732D4CBB3D5055E8A35AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.