General
- Target 2026-08-08_fdc0cecb10255449d0e249e7e2163ce6_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.3MB
- Sample260808-cst4hs1tfw
- SHA256 24fd6554550cc726e0702f9c1669e00205f2b47f0dbb66b36ffa3237f61be7b6
- MD5 fdc0cecb10255449d0e249e7e2163ce6
- SHA1 c6296a65b8355ecae20567f53e0068e70d580f16
- SHA512 1c8762f35eac9361bdcca889222d05056c120497ededa0aa18c7d3569360879829a5035d27592b849118205c6a8e9382ab165e4f9dc059569cf8d78f154a798d
- SSDEEP 393216:x0jxLnarU8z7zhff4E3npAdtyLc3HwnPp/QgEfZl8cu+pVSFrY+4vJOE3J:Sx79E7P3pSty6QnPt+r8cupdY+sJX3J
- TLSH T1EC17331137E68471D0B20932D66AD36F69BABD721732C4CBE2D506AD4D35AC29C39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_fdc0cecb10255449d0e249e7e2163ce6_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_fdc0cecb10255449d0e249e7e2163ce6_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_fdc0cecb10255449d0e249e7e2163ce6_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.3MB
- SHA256 24fd6554550cc726e0702f9c1669e00205f2b47f0dbb66b36ffa3237f61be7b6
- MD5 fdc0cecb10255449d0e249e7e2163ce6
- SHA1 c6296a65b8355ecae20567f53e0068e70d580f16
- SHA512 1c8762f35eac9361bdcca889222d05056c120497ededa0aa18c7d3569360879829a5035d27592b849118205c6a8e9382ab165e4f9dc059569cf8d78f154a798d
- SSDEEP 393216:x0jxLnarU8z7zhff4E3npAdtyLc3HwnPp/QgEfZl8cu+pVSFrY+4vJOE3J:Sx79E7P3pSty6QnPt+r8cupdY+sJX3J
- TLSH T1EC17331137E68471D0B20932D66AD36F69BABD721732C4CBE2D506AD4D35AC29C39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.