General
- Target 2026-07-20_f3e7cb1eb950ed0f5ee267f8db5449b3_amadey_coinminer_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 28.3MB
- Sample260720-ka5rasdz91
- SHA256 2d592487db8a9b0dff44392c42e9199a9ae4cc5e9d901c2e5a08d66e684f15ff
- MD5 f3e7cb1eb950ed0f5ee267f8db5449b3
- SHA1 c5c1716b5a57632599d51c173cdccbb646faa6d8
- SHA512 a334015db092f822886c35d6977d8903092793aebd4d382fa1b7f26a2cab57154a10153d800f10791403a4bfc9ea97dd9029dc7cdda0f8e5e38e0a3a4b195450
- SSDEEP 786432:nPLFrJ3X3sCEg+JEx5YtjTZh2ZyXnVJ58S3Y0TKhzJklp:nzFrxHtEzGIZ7nO9hz
- TLSH T15B572363A65080F1D1590A3161776F39B6F65F924F218AE7E798FDE12C331A1E23321B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_f3e7cb1eb950ed0f5ee267f8db5449b3_amadey_coinminer_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f3e7cb1eb950ed0f5ee267f8db5449b3_amadey_coinminer_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 28.3MB
- SHA256 2d592487db8a9b0dff44392c42e9199a9ae4cc5e9d901c2e5a08d66e684f15ff
- MD5 f3e7cb1eb950ed0f5ee267f8db5449b3
- SHA1 c5c1716b5a57632599d51c173cdccbb646faa6d8
- SHA512 a334015db092f822886c35d6977d8903092793aebd4d382fa1b7f26a2cab57154a10153d800f10791403a4bfc9ea97dd9029dc7cdda0f8e5e38e0a3a4b195450
- SSDEEP 786432:nPLFrJ3X3sCEg+JEx5YtjTZh2ZyXnVJ58S3Y0TKhzJklp:nzFrxHtEzGIZ7nO9hz
- TLSH T15B572363A65080F1D1590A3161776F39B6F65F924F218AE7E798FDE12C331A1E23321B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)