General
- Target 2026-07-28_9655e80db40d1e7aa518497fc2d6ef75_amadey_coinminer_darkgate_elex_maze_remcos_smoke-loader_stop
- Size 6.5MB
- Sample260728-e83fyayand
- SHA256 5c4d7c3146db8c5d3369af94fe0bbd12b773ede11959800fb0c43bfcaca43b58
- MD5 9655e80db40d1e7aa518497fc2d6ef75
- SHA1 be07ff32d6bf620166f4ce392aa632a361823289
- SHA512 662a72ac957886ca83e5aa7de23f6744e088f1dd479221afe5ea6bcb1c6eb77204070186b5f8c98d35a66374ac60c3186006168ff2357587f717f8b6943509f6
- SSDEEP 98304:5uIvRXGNq9I13NpDBRYhdLyFfqZ8d/E71XZ8gfMfA0AE+MKoRNKsedAnC+:AIvRWN02NlLYrLAhEYPaoRMbdd+
- TLSH T16466F121F7A9C071D69A04314539AF3A007DFE26472198C7B3C46F2FFE319D2AA35A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-28_9655e80db40d1e7aa518497fc2d6ef75_amadey_coinminer_darkgate_elex_maze_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_9655e80db40d1e7aa518497fc2d6ef75_amadey_coinminer_darkgate_elex_maze_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_9655e80db40d1e7aa518497fc2d6ef75_amadey_coinminer_darkgate_elex_maze_remcos_smoke-loader_stop
- Size 6.5MB
- SHA256 5c4d7c3146db8c5d3369af94fe0bbd12b773ede11959800fb0c43bfcaca43b58
- MD5 9655e80db40d1e7aa518497fc2d6ef75
- SHA1 be07ff32d6bf620166f4ce392aa632a361823289
- SHA512 662a72ac957886ca83e5aa7de23f6744e088f1dd479221afe5ea6bcb1c6eb77204070186b5f8c98d35a66374ac60c3186006168ff2357587f717f8b6943509f6
- SSDEEP 98304:5uIvRXGNq9I13NpDBRYhdLyFfqZ8d/E71XZ8gfMfA0AE+MKoRNKsedAnC+:AIvRWN02NlLYrLAhEYPaoRMbdd+
- TLSH T16466F121F7A9C071D69A04314539AF3A007DFE26472198C7B3C46F2FFE319D2AA35A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.