General
- Target 2026-07-23_df45f9085e8eb879dd9d198aee5fd81c_coinminer_darkgate_elex_glassworm_maze_revil_stealc
- Size 4.1MB
- Sample260723-c6hmmscr8t
- SHA256 e444f5a6f24fb1fd96c45b5fb82c2af885051481ffe606d49424edde6c62e30e
- MD5 df45f9085e8eb879dd9d198aee5fd81c
- SHA1 db9c4c677d473eab399fd54814f652766c5baac1
- SHA512 6877fd15e7fdf8cc653ca33777554b2be8e9cd5b8c52b3cb529d53ee9c39c771e5e0d3f9cb252a2cb0a10b462278ee3484242f4a3f334e4ca8ef3ab4818c2f13
- SSDEEP 49152:ZpkTTobd4Zr7k+C1IebCL9yzYQzYACTLm0/0LoVOtYPTt+fdU41YTDF99g91g9+r:/kIbd4r7k+CywWyzTz74LB/0Lj241Y3
- TLSH T16C16BE12BA80C135F5E302B2997E777A483DBA310738C5C7E3881A5E1E716D27A39B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_df45f9085e8eb879dd9d198aee5fd81c_coinminer_darkgate_elex_glassworm_maze_revil_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_df45f9085e8eb879dd9d198aee5fd81c_coinminer_darkgate_elex_glassworm_maze_revil_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_df45f9085e8eb879dd9d198aee5fd81c_coinminer_darkgate_elex_glassworm_maze_revil_stealc
- Size 4.1MB
- SHA256 e444f5a6f24fb1fd96c45b5fb82c2af885051481ffe606d49424edde6c62e30e
- MD5 df45f9085e8eb879dd9d198aee5fd81c
- SHA1 db9c4c677d473eab399fd54814f652766c5baac1
- SHA512 6877fd15e7fdf8cc653ca33777554b2be8e9cd5b8c52b3cb529d53ee9c39c771e5e0d3f9cb252a2cb0a10b462278ee3484242f4a3f334e4ca8ef3ab4818c2f13
- SSDEEP 49152:ZpkTTobd4Zr7k+C1IebCL9yzYQzYACTLm0/0LoVOtYPTt+fdU41YTDF99g91g9+r:/kIbd4r7k+CywWyzTz74LB/0Lj241Y3
- TLSH T16C16BE12BA80C135F5E302B2997E777A483DBA310738C5C7E3881A5E1E716D27A39B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE