General
- Target 2026-08-06_06ab41431e43ac06a1c4ee41577298e6_amadey_coinminer_darkgate_darpapox_elex_icedid_nymaim_rhadamanthys_smoke-loader_wannacry
- Size 3.9MB
- Sample260806-td5p5seq4x
- SHA256 fda32c8afa4e1b63c5567e332d8adf4473bbc8f536dc7a6f426477dc57b0d41d
- MD5 06ab41431e43ac06a1c4ee41577298e6
- SHA1 115aadcb27f97dde964700886d8dbee713f2c006
- SHA512 e2b26f5d5007598b17e82b13c4618bf7364bb84d93dd70a0bef37800198f6c263db41b3dd8076df59fa7241168480da1ba06fcfbc19d32bf54c2635d46b725df
- SSDEEP 98304:etXYgNhF5B3mBf68a150o6L8zBeCCbRDuHQA+2Z6hxvWbrtUTrUHOJ:+7pj15pec8ZbRDuHQA+2cx+NcIOJ
- TLSH T1DF16C0213780C076D26702319ADD7779B1BBBA705B3582DB77942E3C2EB0893D628767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_06ab41431e43ac06a1c4ee41577298e6_amadey_coinminer_darkgate_darpapox_elex_icedid_nymaim_rh.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_06ab41431e43ac06a1c4ee41577298e6_amadey_coinminer_darkgate_darpapox_elex_icedid_nymaim_rh.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_06ab41431e43ac06a1c4ee41577298e6_amadey_coinminer_darkgate_darpapox_elex_icedid_nymaim_rhadamanthys_smoke-loader_wannacry
- Size 3.9MB
- SHA256 fda32c8afa4e1b63c5567e332d8adf4473bbc8f536dc7a6f426477dc57b0d41d
- MD5 06ab41431e43ac06a1c4ee41577298e6
- SHA1 115aadcb27f97dde964700886d8dbee713f2c006
- SHA512 e2b26f5d5007598b17e82b13c4618bf7364bb84d93dd70a0bef37800198f6c263db41b3dd8076df59fa7241168480da1ba06fcfbc19d32bf54c2635d46b725df
- SSDEEP 98304:etXYgNhF5B3mBf68a150o6L8zBeCCbRDuHQA+2Z6hxvWbrtUTrUHOJ:+7pj15pec8ZbRDuHQA+2cx+NcIOJ
- TLSH T1DF16C0213780C076D26702319ADD7779B1BBBA705B3582DB77942E3C2EB0893D628767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory