General
- Target 2026-07-18_2b1ab690077cbefc445bc7fe5acc69b9_amadey_coinminer_darkgate_elex_smoke-loader_swisyn
- Size 10.1MB
- Sample260718-vdfxfsbt6y
- SHA256 94b30116b7fbc4f5bb855cab44085b1535c3af798d21b7edadf19f0a93f115df
- MD5 2b1ab690077cbefc445bc7fe5acc69b9
- SHA1 b8a6d211c4ab9ba4bb2e40ea865422a94b407141
- SHA512 3fb3524065360b1433f996aef8d30910f1c2790732d55856aff82838ba7dee82e9d43cf61ab3935a66d0b458a5a9a53ddd511b1f91304b41cc939e15ec0e2923
- SSDEEP 196608:00QKZmUSotaar9frF9a/T4S+Jn5lSCxa98bC2Y/hsTZbhm7B5veD0bi1zwRsTpo7:0Ultamuh+Jn5UCx0WXY6FhmENwWTCgrs
- TLSH T134B65A227BA1C465D19611708E28DBEE435AFD30CF2553C3B2D07F2E2E355E29D3962A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_2b1ab690077cbefc445bc7fe5acc69b9_amadey_coinminer_darkgate_elex_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_2b1ab690077cbefc445bc7fe5acc69b9_amadey_coinminer_darkgate_elex_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_2b1ab690077cbefc445bc7fe5acc69b9_amadey_coinminer_darkgate_elex_smoke-loader_swisyn
- Size 10.1MB
- SHA256 94b30116b7fbc4f5bb855cab44085b1535c3af798d21b7edadf19f0a93f115df
- MD5 2b1ab690077cbefc445bc7fe5acc69b9
- SHA1 b8a6d211c4ab9ba4bb2e40ea865422a94b407141
- SHA512 3fb3524065360b1433f996aef8d30910f1c2790732d55856aff82838ba7dee82e9d43cf61ab3935a66d0b458a5a9a53ddd511b1f91304b41cc939e15ec0e2923
- SSDEEP 196608:00QKZmUSotaar9frF9a/T4S+Jn5lSCxa98bC2Y/hsTZbhm7B5veD0bi1zwRsTpo7:0Ultamuh+Jn5UCx0WXY6FhmENwWTCgrs
- TLSH T134B65A227BA1C465D19611708E28DBEE435AFD30CF2553C3B2D07F2E2E355E29D3962A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory