General
- Target 2026-08-03_c2f9fa0a41401f13df857932dfde0cfa_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_rhadamanthys_smoke-loader_stealc_tofsee
- Size 3.5MB
- Sample260804-lv2e2ssybs
- SHA256 4f85ff561c16c03b2eb89a0e4fba4124d621f25151a200ff99cd9179a02e70a5
- MD5 c2f9fa0a41401f13df857932dfde0cfa
- SHA1 8c67de70e1f6cdd274d411fb367260053174cff9
- SHA512 66914c172d5e862c80e93eb446f844ec8444bd816e6224032a059094270e01632a012b3b9c772e9586eca045fc1950f35167fb52cba8ff9fd0da5a03876282c3
- SSDEEP 49152:dHK3ocHZd9i+Rj8HhL+BuHcoTdaYWVegnnqrSeyt4GcokGzrTrURQb0bHj5Np:MT9lRIBWuBhBgqrSeuXkurUjbjbp
- TLSH T11E06D013B651C0B2D249267116F6173DAF78DF110EB1CA43EB94EEBA2D716618F2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c2f9fa0a41401f13df857932dfde0cfa_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_r.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c2f9fa0a41401f13df857932dfde0cfa_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_rhadamanthys_smoke-loader_stealc_tofsee
- Size 3.5MB
- SHA256 4f85ff561c16c03b2eb89a0e4fba4124d621f25151a200ff99cd9179a02e70a5
- MD5 c2f9fa0a41401f13df857932dfde0cfa
- SHA1 8c67de70e1f6cdd274d411fb367260053174cff9
- SHA512 66914c172d5e862c80e93eb446f844ec8444bd816e6224032a059094270e01632a012b3b9c772e9586eca045fc1950f35167fb52cba8ff9fd0da5a03876282c3
- SSDEEP 49152:dHK3ocHZd9i+Rj8HhL+BuHcoTdaYWVegnnqrSeyt4GcokGzrTrURQb0bHj5Np:MT9lRIBWuBhBgqrSeuXkurUjbjbp
- TLSH T11E06D013B651C0B2D249267116F6173DAF78DF110EB1CA43EB94EEBA2D716618F2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL