General
- Target 2026-08-04_98fb5d121b292b8d3a662ecbfcb6eafe_amadey_coinminer_darkgate_elex_glassworm_mafia_qakbot_revil_smoke-loader_stealc
- Size 5.1MB
- Sample260804-xtnncacm9z
- SHA256 a5682ceb54ac5be3dedb93afcfcfb40c698c7559886315bc6b62b52055a91195
- MD5 98fb5d121b292b8d3a662ecbfcb6eafe
- SHA1 de61b69fa55e410b6c6f40bb100324e934e8963a
- SHA512 dcd07d68b02e7339018b4e6da6dba2075945c2e2c964ad9668164a9c6af99493f51ceacfc15da74e1d25919eba4a5a7cd82ed15f7f5fc3327318f7ba62721099
- SSDEEP 98304:aUG7pCCWImbWoaI/v23iUCjpp7wRGpj3:SdCCWPbWoyyUcrF9
- TLSH T1EE36BF42F7D748F5D842917D12EB677B1E39A620C326D9C3DBA12CA59C302D1A63E3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_98fb5d121b292b8d3a662ecbfcb6eafe_amadey_coinminer_darkgate_elex_glassworm_mafia_qakbot_revil_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_98fb5d121b292b8d3a662ecbfcb6eafe_amadey_coinminer_darkgate_elex_glassworm_mafia_qakbot_revil_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_98fb5d121b292b8d3a662ecbfcb6eafe_amadey_coinminer_darkgate_elex_glassworm_mafia_qakbot_revil_smoke-loader_stealc
- Size 5.1MB
- SHA256 a5682ceb54ac5be3dedb93afcfcfb40c698c7559886315bc6b62b52055a91195
- MD5 98fb5d121b292b8d3a662ecbfcb6eafe
- SHA1 de61b69fa55e410b6c6f40bb100324e934e8963a
- SHA512 dcd07d68b02e7339018b4e6da6dba2075945c2e2c964ad9668164a9c6af99493f51ceacfc15da74e1d25919eba4a5a7cd82ed15f7f5fc3327318f7ba62721099
- SSDEEP 98304:aUG7pCCWImbWoaI/v23iUCjpp7wRGpj3:SdCCWPbWoyyUcrF9
- TLSH T1EE36BF42F7D748F5D842917D12EB677B1E39A620C326D9C3DBA12CA59C302D1A63E3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1