2026-07-24_759fa31baec1ed12384a819cfce64018_coinminer_darkgate_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-24_759fa31baec1ed12384a819cfce64018_coinminer_darkgate_elex_maze
Size 5.2MB
Sample260724-latjpswtfs
SHA256 d1dd238545c420ea8fea963df4a0f2d7c89e7f6faafe246d9cb35d5f1c334632
MD5 759fa31baec1ed12384a819cfce64018
SHA1 b1c022c853472d34adb6476005b42bf59d330d8d
SHA512 88945252000c7edf2e42be2bf660c40b994f3e0c5f1e7309bb23a00007733cf39db808fc1ba32e751ba77b1cfa233b26088075ac27b676abd0a9564c10832abe
SSDEEP 98304:vejvrSd4Skl3Jfy/gsypOe5qRZZXYz8mOzwOVaK2Tc5:mjmkFJqhypG9kdmw
TLSH
T1BA462312BD868133D66802B96D7FDA99806EBD409B2560C3F798779B0D307D3A237F46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-24_759fa31baec1ed12384a819cfce64018_coinminer_darkgate_elex_maze

File Explorer

2026-07-24_759fa31baec1ed12384a819cfce64018_coinminer_darkgate_elex_maze

.exe 5.2MB

2026-07-24_759fa31baec1ed12384a819cfce64018_coinminer_darkgate_elex_maze

IMPHASH 8f5f03b875c045c28ce93bf338c548c0
SHA256 d1dd238545c420ea8fea963df4a0f2d7c89e7f6faafe246d9cb35d5f1c334632
MD5 759fa31baec1ed12384a819cfce64018
SHA1 b1c022c853472d34adb6476005b42bf59d330d8d
SHA512 88945252000c7edf2e42be2bf660c40b994f3e0c5f1e7309bb23a00007733cf39db808fc1ba32e751ba77b1cfa233b26088075ac27b676abd0a9564c10832abe
SSDEEP 98304:vejvrSd4Skl3Jfy/gsypOe5qRZZXYz8mOzwOVaK2Tc5:mjmkFJqhypG9kdmw
TLSH
T1BA462312BD868133D66802B96D7FDA99806EBD409B2560C3F798779B0D307D3A237F46
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

196914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\buildagent_prod\workspace\4800\Installer\AMT\Release\Setup.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

GetTempFileNameW CreateDirectoryW MoveFileW MoveFileExW ExpandEnvironmentStringsW CreateFileW GetFileSize CloseHandle ReadFile GetFileAttributesW IsWow64Process GetCurrentProcess MultiByteToWideChar CreateProcessW GetExitCodeProcess GetCurrentDirectoryW GetDriveTypeW SetFilePointer WriteFile GetProcAddress GetTickCount GetLocalTime EnumResourceLanguagesW GetLocaleInfoW GetUserDefaultLangID GetUserDefaultUILanguage LoadLibraryExW GetNativeSystemInfo VerSetConditionMask VerifyVersionInfoW DosDateTimeToFileTime LocalFileTimeToFileTime SetFileTime OpenMutexW ReleaseMutex CreateMutexW Sleep GetOverlappedResult CreateEventW DeviceIoControl CancelIo SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP OutputDebugStringW HeapReAlloc FreeEnvironmentStringsW GetTempPathW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType GetStdHandle GetProcessHeap GetOEMCP GetACP IsValidCodePage HeapSize GetModuleHandleExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess InitializeCriticalSectionAndSpinCount SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo RtlUnwind RaiseException IsProcessorFeaturePresent IsDebuggerPresent ExitThread GetCurrentThreadId CreateThread HeapFree HeapAlloc GetSystemPowerStatus GetEnvironmentVariableW WaitForSingleObject GetCommandLineW GetVersion DeleteFileW RemoveDirectoryW CopyFileW SetFileAttributesW GetModuleFileNameW LocalAlloc lstrlenW FreeLibrary LoadLibraryExA LoadLibraryW GetLastError GetSystemDirectoryW MulDiv LocalFree FormatMessageW ExitProcess SizeofResource LockResource LoadResource GetModuleHandleW FindResourceW GetVersionExW FindClose FindNextFileW FindFirstFileW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection DecodePointer EncodePointer GetStringTypeW WideCharToMultiByte WriteConsoleW FlushFileBuffers GetEnvironmentStringsW

user32

InflateRect SetClassLongW SetCursor CreateDialogIndirectParamW MapDialogRect SetFocus OffsetRect CallWindowProcW AdjustWindowRectEx SetRectEmpty CopyRect MapWindowPoints GetSystemMetrics GetClassNameW DrawTextW GetWindowTextLengthW LoadStringW ExitWindowsEx MessageBoxW MoveWindow ReleaseDC GetDC LoadImageW wsprintfW MessageBoxIndirectW FillRect SetRect GetWindowLongW EnableWindow SetDlgItemTextW InvalidateRect SendMessageW GetParent CreateWindowExW EndDialog SetWindowTextW GetWindowTextW GetWindow GetDlgItem GetClientRect SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoW DestroyWindow DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW ShowWindow SetWindowLongW LoadCursorW

gdi32

GetTextMetricsW CreateFontW GetDeviceCaps DeleteObject DeleteDC StretchBlt BitBlt SelectObject CreateCompatibleDC SetBkMode SetTextColor GetObjectW GetStockObject

advapi32

LookupPrivilegeValueW RegQueryValueExW RegCloseKey RegSetValueExW SetSecurityDescriptorDacl InitializeSecurityDescriptor SetEntriesInAclW RegDeleteKeyW AdjustTokenPrivileges RegOpenKeyExW OpenProcessToken FreeSid CheckTokenMembership AllocateAndInitializeSid RegCreateKeyExW

shell32

SHGetFolderPathW SHGetPathFromIDListW SHBrowseForFolderW SHGetFolderLocation SHFileOperationW CommandLineToArgvW ShellExecuteW SHCreateDirectoryExW

ole32

CoCreateInstance OleRun CoInitialize

oleaut32

GetErrorInfo SysFreeString SysStringLen VariantInit VariantCopy VariantClear SysAllocString

shlwapi

PathGetCharTypeW PathSkipRootW PathStripToRootW PathIsUNCW PathCombineW PathIsRelativeW PathFileExistsW PathRemoveArgsW PathGetArgsW PathRemoveFileSpecW PathQuoteSpacesW PathFindFileNameW PathRemoveExtensionW PathFindExtensionW PathAppendW PathMatchSpecW

setupapi

SetupOpenInfFileW SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupFindFirstLineW SetupCloseInfFile SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupFindNextLine SetupGetStringFieldW SetupGetLineTextW

cabinet

ord23 ord22 ord20

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-24_759fa31baec1ed12384a819cfce64018_coinminer_darkgate_elex_maze

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

setupapi

cabinet

generic