General
- Target 2026-07-27_6d216a04c6e422c46ee173ba4229a80e_coinminer_darkgate_elex_glassworm_mafia_poet-rat_remcos_stealc
- Size 37.0MB
- Sample260727-v3eexsaq5x
- SHA256 34c7227931810c6ccfc167dfd64d72837077807065676a10646eb36ca3c5dbc9
- MD5 6d216a04c6e422c46ee173ba4229a80e
- SHA1 556f35fa315a2d53a1e0c6d83b41e9c1f95adabc
- SHA512 6ef7eac7bdab0e3e1e64512b128575b3cb284739baabcb835a78f827642e0a12f696007d0192037d268e41815e556dcad9d2fda8b93a4f013ca9c33c48601178
- SSDEEP 393216:R8/Fr1dRdWrDBE2+4gtzkiFAx8JTsrR40PxJsv6tWKFdu9CDABT4:R8/Fr1dDWHBJ+46zkiFgVPqT
- TLSH T120877D91FB9AC1F2EAC651BF01AEE61E6736960547204AD3D10C3E2B9D317C17D3928E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_6d216a04c6e422c46ee173ba4229a80e_coinminer_darkgate_elex_glassworm_mafia_poet-rat_remcos_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_6d216a04c6e422c46ee173ba4229a80e_coinminer_darkgate_elex_glassworm_mafia_poet-rat_remcos_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_6d216a04c6e422c46ee173ba4229a80e_coinminer_darkgate_elex_glassworm_mafia_poet-rat_remcos_stealc
- Size 37.0MB
- SHA256 34c7227931810c6ccfc167dfd64d72837077807065676a10646eb36ca3c5dbc9
- MD5 6d216a04c6e422c46ee173ba4229a80e
- SHA1 556f35fa315a2d53a1e0c6d83b41e9c1f95adabc
- SHA512 6ef7eac7bdab0e3e1e64512b128575b3cb284739baabcb835a78f827642e0a12f696007d0192037d268e41815e556dcad9d2fda8b93a4f013ca9c33c48601178
- SSDEEP 393216:R8/Fr1dRdWrDBE2+4gtzkiFAx8JTsrR40PxJsv6tWKFdu9CDABT4:R8/Fr1dDWHBJ+46zkiFgVPqT
- TLSH T120877D91FB9AC1F2EAC651BF01AEE61E6736960547204AD3D10C3E2B9D317C17D3928E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks whether UAC is enabled