General
- Target 2026-07-17_ba57ce429be440e5b7a22e2a0d75f4cb_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- Sample260717-z77dqaas61
- SHA256 662d223745ce622c84dc801a4962d74bd328cb35a2068d16ac131b7ffc9c64e1
- MD5 ba57ce429be440e5b7a22e2a0d75f4cb
- SHA1 691ea749a058d1e54ecf88a278343d353a0ce971
- SHA512 69933817bd5c60d0b8fdd3c6ac502caf3b24a2238f44bbfee349a9f1e0daffc7a8f771b3bb42e2094d7942ed293acc20fc2b04275e7093d56d6f117a87dbff46
- SSDEEP 393216:40gxLnarU8z7zhff4E3npAduBLcaHwnPp/QgEfpYuOqdd5uJ7chqT3NK:ix79E7P3pSuBDQnPtSN+Ch+dK
- TLSH T19F2733117BE58475E1620671D6BEE32B647AFD311B36C4CBB2D5059E4932A828C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ba57ce429be440e5b7a22e2a0d75f4cb_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ba57ce429be440e5b7a22e2a0d75f4cb_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ba57ce429be440e5b7a22e2a0d75f4cb_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- SHA256 662d223745ce622c84dc801a4962d74bd328cb35a2068d16ac131b7ffc9c64e1
- MD5 ba57ce429be440e5b7a22e2a0d75f4cb
- SHA1 691ea749a058d1e54ecf88a278343d353a0ce971
- SHA512 69933817bd5c60d0b8fdd3c6ac502caf3b24a2238f44bbfee349a9f1e0daffc7a8f771b3bb42e2094d7942ed293acc20fc2b04275e7093d56d6f117a87dbff46
- SSDEEP 393216:40gxLnarU8z7zhff4E3npAduBLcaHwnPp/QgEfpYuOqdd5uJ7chqT3NK:ix79E7P3pSuBDQnPtSN+Ch+dK
- TLSH T19F2733117BE58475E1620671D6BEE32B647AFD311B36C4CBB2D5059E4932A828C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.