General
- Target 2026-08-03_979f9b703a272010e96640c8aeab05a4_amadey_coinminer_darkgate_elex_glassworm_remcos_smoke-loader
- Size 22.0MB
- Sample260804-mr3pdatwgt
- SHA256 dcc650dc3c6e30b2651869450184b84373d976ad0bd3f8bb0d5cc50a52ff4a7c
- MD5 979f9b703a272010e96640c8aeab05a4
- SHA1 cd334b2e0433a5dbc490116b6f2ab51bb5d7a71e
- SHA512 212250ccea763e71fe2b416f3235314dd1aaa36c20e3267f6582551b9022a87672ac49f0e96824cf3d274c648d39bec857ac78d5f10872d4633026a9054787df
- SSDEEP 393216:cSLP0DdQHqR0F6nHCVCyOgIE3WZUHl0Lzi6GY7a99uvfCUNrw:cq6yu0Fe2CdgIWWZelhfY7OIvf5rw
- TLSH T111370202FB8284F2C44D567515B6573E7A349E121735CAC3EB90BDA96C710D2AB3B38E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_979f9b703a272010e96640c8aeab05a4_amadey_coinminer_darkgate_elex_glassworm_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_979f9b703a272010e96640c8aeab05a4_amadey_coinminer_darkgate_elex_glassworm_remcos_smoke-loader
- Size 22.0MB
- SHA256 dcc650dc3c6e30b2651869450184b84373d976ad0bd3f8bb0d5cc50a52ff4a7c
- MD5 979f9b703a272010e96640c8aeab05a4
- SHA1 cd334b2e0433a5dbc490116b6f2ab51bb5d7a71e
- SHA512 212250ccea763e71fe2b416f3235314dd1aaa36c20e3267f6582551b9022a87672ac49f0e96824cf3d274c648d39bec857ac78d5f10872d4633026a9054787df
- SSDEEP 393216:cSLP0DdQHqR0F6nHCVCyOgIE3WZUHl0Lzi6GY7a99uvfCUNrw:cq6yu0Fe2CdgIWWZelhfY7OIvf5rw
- TLSH T111370202FB8284F2C44D567515B6573E7A349E121735CAC3EB90BDA96C710D2AB3B38E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)