General
- Target 2026-07-29_1463d546164a226b6f3f7ea2f9f3bfd4_amadey_coinminer_darkgate_elex_glassworm_magniber_remcos_smoke-loader_stop_wannacry
- Size 41.8MB
- Sample260729-eb489stdnh
- SHA256 3a35a122cbfd0a90d89e90c1612820f06967393e84eb9c06c86c012a1adb879b
- MD5 1463d546164a226b6f3f7ea2f9f3bfd4
- SHA1 5875b563a92d727703284823f6f9c5d2c9d5d95b
- SHA512 e20d9026ee826de21fc6aba850c6f4a892c0dc9e0e693149dbc34f4b90d1793b4f6d4c6d2ca3028b7a9310137dd5d0f523a2ddd0e688138f559e2ecb9abc3006
- SSDEEP 786432:d7uoGdPc6I4IafMmYUKYkrsReUiae/XGwHgU3y78Kk2BslXkibVYmIs8I/jL:dz0ksYYRehX1pyhBepIs8I/X
- TLSH T147A71223B25788B5C04D09B512B26B3C2FB45F614B3588E3EFE06EA46DB11E19FB650D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-29_1463d546164a226b6f3f7ea2f9f3bfd4_amadey_coinminer_darkgate_elex_glassworm_magniber_remcos.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_1463d546164a226b6f3f7ea2f9f3bfd4_amadey_coinminer_darkgate_elex_glassworm_magniber_remcos.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1463d546164a226b6f3f7ea2f9f3bfd4_amadey_coinminer_darkgate_elex_glassworm_magniber_remcos_smoke-loader_stop_wannacry
- Size 41.8MB
- SHA256 3a35a122cbfd0a90d89e90c1612820f06967393e84eb9c06c86c012a1adb879b
- MD5 1463d546164a226b6f3f7ea2f9f3bfd4
- SHA1 5875b563a92d727703284823f6f9c5d2c9d5d95b
- SHA512 e20d9026ee826de21fc6aba850c6f4a892c0dc9e0e693149dbc34f4b90d1793b4f6d4c6d2ca3028b7a9310137dd5d0f523a2ddd0e688138f559e2ecb9abc3006
- SSDEEP 786432:d7uoGdPc6I4IafMmYUKYkrsReUiae/XGwHgU3y78Kk2BslXkibVYmIs8I/jL:dz0ksYYRehX1pyhBepIs8I/X
- TLSH T147A71223B25788B5C04D09B512B26B3C2FB45F614B3588E3EFE06EA46DB11E19FB650D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Suspicious use of NtSetInformationThreadHideFromDebugger