General
- Target 2026-07-22_fbb61745200877604521a6f207d4e47e_bkransomware_coinminer_darkgate_elex_glassworm_hijackloader_maze_rhadamanthys
- Size 42.3MB
- Sample260722-t7mfnadj3w
- SHA256 79a25204d1e88e5bf176c4a95eff59124bf6437a092b9dc98353947dbb5d7b01
- MD5 fbb61745200877604521a6f207d4e47e
- SHA1 49833425041ad23a5a7f5ccacc73234ed515584a
- SHA512 f71ea258cf3dee8c230e8f8adf1b4b7a25b175c1b02707fec28fb1263166105db029741b630786dcec45c77a8c60351d94573c1a1719e8ad46cea045b750f7a9
- SSDEEP 786432:RuZoY+bURPtRXDaexOZwsa4XfK2GtfBlEWLIegtsCZqJxLm+45IaPD+wVFTnqS/5:
- TLSH T138A71862F286C954D8A51B70DF39EAFC013A6E74FEB4920F2149BD9A7F712C35021A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-22_fbb61745200877604521a6f207d4e47e_bkransomware_coinminer_darkgate_elex_glassworm_hijackloader_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_fbb61745200877604521a6f207d4e47e_bkransomware_coinminer_darkgate_elex_glassworm_hijackloader_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_fbb61745200877604521a6f207d4e47e_bkransomware_coinminer_darkgate_elex_glassworm_hijackloader_maze_rhadamanthys
- Size 42.3MB
- SHA256 79a25204d1e88e5bf176c4a95eff59124bf6437a092b9dc98353947dbb5d7b01
- MD5 fbb61745200877604521a6f207d4e47e
- SHA1 49833425041ad23a5a7f5ccacc73234ed515584a
- SHA512 f71ea258cf3dee8c230e8f8adf1b4b7a25b175c1b02707fec28fb1263166105db029741b630786dcec45c77a8c60351d94573c1a1719e8ad46cea045b750f7a9
- SSDEEP 786432:RuZoY+bURPtRXDaexOZwsa4XfK2GtfBlEWLIegtsCZqJxLm+45IaPD+wVFTnqS/5:
- TLSH T138A71862F286C954D8A51B70DF39EAFC013A6E74FEB4920F2149BD9A7F712C35021A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled