General
- Target 2026-07-18_85ef7fcd1001c38be5a79b9df3797f90_amadey_coinminer_darkgate_elex_smoke-loader_swisyn
- Size 10.1MB
- Sample260718-vaaahaf12m
- SHA256 b96ce4a660b706737d9dc9257e7eb7a0d740887631796b506c49cfbb6273a9b4
- MD5 85ef7fcd1001c38be5a79b9df3797f90
- SHA1 a041dbbca17aaff6481856e20465a833704b57c5
- SHA512 a91a27621bddcb59a01ed8682d4e5679d87f525b581975b079d0b3a59e86dfc90dadee4eab399bcbfedbeafa827419293c80da7690e4a469c47effab23ced183
- SSDEEP 196608:P0QKZmUSotaar9frF9a2T4S+Jn5lSCxa98bC2Y/hsTZbhm7B5veD0bi1zwRsTpo/:zUltamXh+Jn5UCx0WXY6FhmENwWTCgrs
- TLSH T1AEB65A227BA1C465D19611708E28DBEE435AFD30CF2553C3B2D07F2E2E355E29D3962A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_85ef7fcd1001c38be5a79b9df3797f90_amadey_coinminer_darkgate_elex_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_85ef7fcd1001c38be5a79b9df3797f90_amadey_coinminer_darkgate_elex_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_85ef7fcd1001c38be5a79b9df3797f90_amadey_coinminer_darkgate_elex_smoke-loader_swisyn
- Size 10.1MB
- SHA256 b96ce4a660b706737d9dc9257e7eb7a0d740887631796b506c49cfbb6273a9b4
- MD5 85ef7fcd1001c38be5a79b9df3797f90
- SHA1 a041dbbca17aaff6481856e20465a833704b57c5
- SHA512 a91a27621bddcb59a01ed8682d4e5679d87f525b581975b079d0b3a59e86dfc90dadee4eab399bcbfedbeafa827419293c80da7690e4a469c47effab23ced183
- SSDEEP 196608:P0QKZmUSotaar9frF9a2T4S+Jn5lSCxa98bC2Y/hsTZbhm7B5veD0bi1zwRsTpo/:zUltamXh+Jn5UCx0WXY6FhmENwWTCgrs
- TLSH T1AEB65A227BA1C465D19611708E28DBEE435AFD30CF2553C3B2D07F2E2E355E29D3962A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory