General
- Target 2026-08-06_95f44f5183d641ca8f018063e5689bc9_amadey_coinminer_darkgate_elex_glassworm_rhadamanthys_stop_swisyn
- Size 5.5MB
- Sample260807-att4ssthpf
- SHA256 fb71e283b4323f361f633e43b705a5c33055b1119b3191f5c5d9f941f2c62808
- MD5 95f44f5183d641ca8f018063e5689bc9
- SHA1 772a0a560d3b6f2d324d94111775b3a2c83cc0ec
- SHA512 6866dbdf89324c8d2b6488e412d57e9521d57539d76b5335f7ab001a74ffd5b01e80c73dd64523d284562dd744ac4669b48e563c9c02e747e702b5113bd54efa
- SSDEEP 98304:XF2dJsavQ/qpyr0k0GKo2xZfKcey3JwyjVrfMFc5Yw99x6SKLaXN8JfeZ9hTpUOI:12Eylqc5YwHx5JKoZ9hTpUOG8D+b
- TLSH T10B46AF12B682C076D5530371941EB7BEA939AE208730DAC3D3D8BE287D715D2663E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_95f44f5183d641ca8f018063e5689bc9_amadey_coinminer_darkgate_elex_glassworm_rhadamanthys_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_95f44f5183d641ca8f018063e5689bc9_amadey_coinminer_darkgate_elex_glassworm_rhadamanthys_stop_swisyn.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_95f44f5183d641ca8f018063e5689bc9_amadey_coinminer_darkgate_elex_glassworm_rhadamanthys_stop_swisyn
- Size 5.5MB
- SHA256 fb71e283b4323f361f633e43b705a5c33055b1119b3191f5c5d9f941f2c62808
- MD5 95f44f5183d641ca8f018063e5689bc9
- SHA1 772a0a560d3b6f2d324d94111775b3a2c83cc0ec
- SHA512 6866dbdf89324c8d2b6488e412d57e9521d57539d76b5335f7ab001a74ffd5b01e80c73dd64523d284562dd744ac4669b48e563c9c02e747e702b5113bd54efa
- SSDEEP 98304:XF2dJsavQ/qpyr0k0GKo2xZfKcey3JwyjVrfMFc5Yw99x6SKLaXN8JfeZ9hTpUOI:12Eylqc5YwHx5JKoZ9hTpUOG8D+b
- TLSH T10B46AF12B682C076D5530371941EB7BEA939AE208730DAC3D3D8BE287D715D2663E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory