General
- Target 2026-07-19_2a2873e764faf293866a7e7579d74050_amadey_coinminer_darkgate_elex_emotet_glassworm_hacktools_smoke-loader
- Size 43.2MB
- Sample260719-285ydsft4p
- SHA256 8260f76199e8c97df0bd8625f4478cef6142f786671a6e23d79588c330accaed
- MD5 2a2873e764faf293866a7e7579d74050
- SHA1 a32f3e611cfb75dab0dc4f60520f866f4bc19c87
- SHA512 84115ef3da37a854a5405eef0fafb4e207eaca964af01f0209f2862fc03ab2a6a927bb92750d6e08a960103e1c646335638182c3a0496daa969120a7494f0864
- SSDEEP 786432:+MApRQM+B18s3vCvM4wz5D01b4yDmibos2IbDxlYbTP8:+UM+B18s3vvhFjiz2Ib9lYbTE
- TLSH T19BA7E123B4418072C26743B18A697B6C6AFDAE32473586E7BBCCAD541FB14D1733934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-19_2a2873e764faf293866a7e7579d74050_amadey_coinminer_darkgate_elex_emotet_glassworm_hacktools_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_2a2873e764faf293866a7e7579d74050_amadey_coinminer_darkgate_elex_emotet_glassworm_hacktools_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_2a2873e764faf293866a7e7579d74050_amadey_coinminer_darkgate_elex_emotet_glassworm_hacktools_smoke-loader
- Size 43.2MB
- SHA256 8260f76199e8c97df0bd8625f4478cef6142f786671a6e23d79588c330accaed
- MD5 2a2873e764faf293866a7e7579d74050
- SHA1 a32f3e611cfb75dab0dc4f60520f866f4bc19c87
- SHA512 84115ef3da37a854a5405eef0fafb4e207eaca964af01f0209f2862fc03ab2a6a927bb92750d6e08a960103e1c646335638182c3a0496daa969120a7494f0864
- SSDEEP 786432:+MApRQM+B18s3vCvM4wz5D01b4yDmibos2IbDxlYbTP8:+UM+B18s3vvhFjiz2Ib9lYbTE
- TLSH T19BA7E123B4418072C26743B18A697B6C6AFDAE32473586E7BBCCAD541FB14D1733934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)