General
- Target 2026-07-17_8d36e00b3ea13ccdd14d5f7452abc1f1_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- Sample260717-1ys1eaaz8s
- SHA256 2433b1ae082394f80ca22ff3877ea2a22cd9c9b5871a1270b5e85ec93b3747c1
- MD5 8d36e00b3ea13ccdd14d5f7452abc1f1
- SHA1 174fd62ce406c2a176354ac6242f498c46503bce
- SHA512 cf7846ab7313633351f8f5dbc4d5941b019cc6f6288f22bf36d0ad07a29cc9b41875409c700b37d6a3704c34b31f00fe9ecac0cac2c92f77ef21ff32e4b65ddf
- SSDEEP 393216:40gxLnarU8z7zhff4E3npAduBLcaHwnPp/QgEfpYuOqdd5uJ7chqT3N2:ix79E7P3pSuBDQnPtSN+Ch+d2
- TLSH T13C2733117BE58475E1620671D6BEE32B647AFD311B36C4CBB2D5059E4932A828C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-17_8d36e00b3ea13ccdd14d5f7452abc1f1_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_8d36e00b3ea13ccdd14d5f7452abc1f1_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_8d36e00b3ea13ccdd14d5f7452abc1f1_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- SHA256 2433b1ae082394f80ca22ff3877ea2a22cd9c9b5871a1270b5e85ec93b3747c1
- MD5 8d36e00b3ea13ccdd14d5f7452abc1f1
- SHA1 174fd62ce406c2a176354ac6242f498c46503bce
- SHA512 cf7846ab7313633351f8f5dbc4d5941b019cc6f6288f22bf36d0ad07a29cc9b41875409c700b37d6a3704c34b31f00fe9ecac0cac2c92f77ef21ff32e4b65ddf
- SSDEEP 393216:40gxLnarU8z7zhff4E3npAduBLcaHwnPp/QgEfpYuOqdd5uJ7chqT3N2:ix79E7P3pSuBDQnPtSN+Ch+d2
- TLSH T13C2733117BE58475E1620671D6BEE32B647AFD311B36C4CBB2D5059E4932A828C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.