General
- Target 2026-08-03_8405ce932b27bef254c88a39a4bb32f0_coinminer_darkgate_elex_glassworm_mafia_revil
- Size 3.2MB
- Sample260804-m5wszsycke
- SHA256 47d534b2326c338e30993d9754360c3a9914a72f56bbad571de9182768b499c9
- MD5 8405ce932b27bef254c88a39a4bb32f0
- SHA1 f7472fd1e4bc75e557328e25f3beaf10193a3fa1
- SHA512 a7456df27ce60d3d32e757f6f0f718e13e52113b1fe949a57adf8e1feb7c99bd0c51ca51c2dad45f94d3a99c1e6ad80593bf4ab347fddc757df2dc9167bc9c61
- SSDEEP 98304:XyVrWmSNqxfE8YdN9s7M7qwlbTrBRfdmnXNClapEpVHqld:CVUlY7mZdhQYapEpVHEd
- TLSH T185F5F5136A40BC69C65232318ABFF3F555259DBA8726CFC346F13EB839301C9793925A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_8405ce932b27bef254c88a39a4bb32f0_coinminer_darkgate_elex_glassworm_mafia_revil.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8405ce932b27bef254c88a39a4bb32f0_coinminer_darkgate_elex_glassworm_mafia_revil
- Size 3.2MB
- SHA256 47d534b2326c338e30993d9754360c3a9914a72f56bbad571de9182768b499c9
- MD5 8405ce932b27bef254c88a39a4bb32f0
- SHA1 f7472fd1e4bc75e557328e25f3beaf10193a3fa1
- SHA512 a7456df27ce60d3d32e757f6f0f718e13e52113b1fe949a57adf8e1feb7c99bd0c51ca51c2dad45f94d3a99c1e6ad80593bf4ab347fddc757df2dc9167bc9c61
- SSDEEP 98304:XyVrWmSNqxfE8YdN9s7M7qwlbTrBRfdmnXNClapEpVHqld:CVUlY7mZdhQYapEpVHEd
- TLSH T185F5F5136A40BC69C65232318ABFF3F555259DBA8726CFC346F13EB839301C9793925A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.