General
- Target 2026-08-04_6bb505625cea0a15faf8ccac0ac96355_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hawkeye_hijackloader_poet-rat_remcos_smoke-loader_stealc_stop_tofsee_vidar
- Size 55.4MB
- Sample260804-2snn6sfl5w
- SHA256 4dea3778ba3f6b9f909717eec2511e96ebd1ffc965a503c9340addbdcb3ea4be
- MD5 6bb505625cea0a15faf8ccac0ac96355
- SHA1 0aed2720cd39b6a77c1457f995cd3ff172ad8bb3
- SHA512 fd006a20da644db3aca7003fc891ab7e219c94e09a1e3b1ebbf051b29b5a81e12dbfec34d268a2b750d1d2a33e585848ffbb71a5fb1745fa568f66c971bbf3d2
- SSDEEP 1572864:a111C1113111C111C111C1113111C11183:+
- TLSH T1C5D7B009FD8744F1D92751B00CDBE3BF8A707A25C5228EAAFB4DCB1B7933B615428256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6bb505625cea0a15faf8ccac0ac96355_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hawkey.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6bb505625cea0a15faf8ccac0ac96355_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hawkey.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6bb505625cea0a15faf8ccac0ac96355_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hawkeye_hijackloader_poet-rat_remcos_smoke-loader_stealc_stop_tofsee_vidar
- Size 55.4MB
- SHA256 4dea3778ba3f6b9f909717eec2511e96ebd1ffc965a503c9340addbdcb3ea4be
- MD5 6bb505625cea0a15faf8ccac0ac96355
- SHA1 0aed2720cd39b6a77c1457f995cd3ff172ad8bb3
- SHA512 fd006a20da644db3aca7003fc891ab7e219c94e09a1e3b1ebbf051b29b5a81e12dbfec34d268a2b750d1d2a33e585848ffbb71a5fb1745fa568f66c971bbf3d2
- SSDEEP 1572864:a111C1113111C111C111C1113111C11183:+
- TLSH T1C5D7B009FD8744F1D92751B00CDBE3BF8A707A25C5228EAAFB4DCB1B7933B615428256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1