General
- Target 2026-07-27_96349147506e5ea1c7e9d3bb8fc158f4_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop
- Size 10.2MB
- Sample260728-ahppyavwdv
- SHA256 8624e862c32b5a42bf91c022895f772f9a3a7c15cb1377a9e54e5441a92701da
- MD5 96349147506e5ea1c7e9d3bb8fc158f4
- SHA1 9e092d7d544cc1f8e145a6d22988796e8bef06fd
- SHA512 0e86af6fe7b46601e1b20566ecfae712bbf09070acdf26672e6a183c6324b7b26260fe1ad8e10589508b253f3f7e51748d81c6466fecf87165a04615b38ea437
- SSDEEP 196608:xWmygrAy9x9/+1/muLzGKNqrsgiZBYPxU26zhQc5WdAJsGOdJdeKJ:xWmh8Cx9/+ZqK+iZCPxUxanjtj
- TLSH T145B6E012FBD180B6C05712B0453B672EA6F8A7354335DAC76AC0795AAA713D18B363CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_96349147506e5ea1c7e9d3bb8fc158f4_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_96349147506e5ea1c7e9d3bb8fc158f4_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_96349147506e5ea1c7e9d3bb8fc158f4_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop
- Size 10.2MB
- SHA256 8624e862c32b5a42bf91c022895f772f9a3a7c15cb1377a9e54e5441a92701da
- MD5 96349147506e5ea1c7e9d3bb8fc158f4
- SHA1 9e092d7d544cc1f8e145a6d22988796e8bef06fd
- SHA512 0e86af6fe7b46601e1b20566ecfae712bbf09070acdf26672e6a183c6324b7b26260fe1ad8e10589508b253f3f7e51748d81c6466fecf87165a04615b38ea437
- SSDEEP 196608:xWmygrAy9x9/+1/muLzGKNqrsgiZBYPxU26zhQc5WdAJsGOdJdeKJ:xWmh8Cx9/+ZqK+iZCPxUxanjtj
- TLSH T145B6E012FBD180B6C05712B0453B672EA6F8A7354335DAC76AC0795AAA713D18B363CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables calling ClearMyTracksByProcess
-
Detects executables manipulated with Fody
-
Detects executables packed with ConfuserEx Mod
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.