General
- Target 2026-07-30_74ebf2047d9f782e89f62f66faef76ed_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.8MB
- Sample260730-2cm3psge92
- SHA256 92ad18f58aedc049debcefc02e4a15fe858a5c614f4c608c897005730c69794b
- MD5 74ebf2047d9f782e89f62f66faef76ed
- SHA1 dac813f3e015d5eca854e4d0ae158d656bc085b1
- SHA512 1f8ec5c094f74409e84739ed64911b158a980dce4de658f4d4c14c33acce0b7e87c480426c9fb7b037254f7d5d3b6448e3ee36275d7163c77524441133c6f177
- SSDEEP 49152:7HHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:7nKdtWsM0r1QnxK4e
- TLSH T1A085AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_74ebf2047d9f782e89f62f66faef76ed_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_74ebf2047d9f782e89f62f66faef76ed_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_74ebf2047d9f782e89f62f66faef76ed_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.8MB
- SHA256 92ad18f58aedc049debcefc02e4a15fe858a5c614f4c608c897005730c69794b
- MD5 74ebf2047d9f782e89f62f66faef76ed
- SHA1 dac813f3e015d5eca854e4d0ae158d656bc085b1
- SHA512 1f8ec5c094f74409e84739ed64911b158a980dce4de658f4d4c14c33acce0b7e87c480426c9fb7b037254f7d5d3b6448e3ee36275d7163c77524441133c6f177
- SSDEEP 49152:7HHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:7nKdtWsM0r1QnxK4e
- TLSH T1A085AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory