General
- Target 2026-07-29_c719105c6dfc5faf9c3f78133622964a_amadey_coinminer_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 20.8MB
- Sample260729-pafjmavybz
- SHA256 55ad3556c7a3ad3f097f593c25b1ec29f84db5773a3fc4c93a861e6be29b4864
- MD5 c719105c6dfc5faf9c3f78133622964a
- SHA1 7aeadad5e00080cd9649926a4ce82a82c5e771bb
- SHA512 0be0fb6ab92eda1186b9f0c10e3ea44ac49cf25d401f7dafda73404345b7073f95a2e8497441884b4ac4ea4bef065bd982d22153120b10bcb32b1d14cc8b48a7
- SSDEEP 393216:N7MnAbFQh1CPwv3uzv86TeCND6JzYYF6zBceFJDClAiUngYyCyVqE+wFFZKFU0Uh:ynAy8ffrz2ePCQgLCyV3FK5U
- TLSH T171271213E2928072F495093584776B3DFAB58F210725C9D3EBE4FCA56D331E1A73A24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_c719105c6dfc5faf9c3f78133622964a_amadey_coinminer_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_c719105c6dfc5faf9c3f78133622964a_amadey_coinminer_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 20.8MB
- SHA256 55ad3556c7a3ad3f097f593c25b1ec29f84db5773a3fc4c93a861e6be29b4864
- MD5 c719105c6dfc5faf9c3f78133622964a
- SHA1 7aeadad5e00080cd9649926a4ce82a82c5e771bb
- SHA512 0be0fb6ab92eda1186b9f0c10e3ea44ac49cf25d401f7dafda73404345b7073f95a2e8497441884b4ac4ea4bef065bd982d22153120b10bcb32b1d14cc8b48a7
- SSDEEP 393216:N7MnAbFQh1CPwv3uzv86TeCND6JzYYF6zBceFJDClAiUngYyCyVqE+wFFZKFU0Uh:ynAy8ffrz2ePCQgLCyV3FK5U
- TLSH T171271213E2928072F495093584776B3DFAB58F210725C9D3EBE4FCA56D331E1A73A24A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)