General
- Target 2026-08-08_b583cf45ea4ef1d2e9be78e0d7a84335_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.5MB
- Sample260808-dc836s1zav
- SHA256 eeec146610c6f2143c7f55b23470ef3a57e7c7b266b4ffa4f533ab12fd967910
- MD5 b583cf45ea4ef1d2e9be78e0d7a84335
- SHA1 1cca8d1e99631fb9ec811841124ed6f334fef31c
- SHA512 17072416aee1aeea6afe7223994669eb2af3f11e4983d8847d00cf3b75d56ce2fcfdf300b7c24231376412ced430cfccc3a584a24eba6c9dc4eaea56f927bdaa
- SSDEEP 393216:x0jxLnarU8z7zhff4E3npAdtyLc3HwnPp/QgEfZl8cu+pVSFrY+4vJOE3T3yfVb:Sx79E7P3pSty6QnPt+r8cupdY+sJX3rG
- TLSH T10127331137E58472D0B20532D66AD36F69BABD721722C4CBF2D50AAD5D35AC28C39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b583cf45ea4ef1d2e9be78e0d7a84335_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b583cf45ea4ef1d2e9be78e0d7a84335_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b583cf45ea4ef1d2e9be78e0d7a84335_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.5MB
- SHA256 eeec146610c6f2143c7f55b23470ef3a57e7c7b266b4ffa4f533ab12fd967910
- MD5 b583cf45ea4ef1d2e9be78e0d7a84335
- SHA1 1cca8d1e99631fb9ec811841124ed6f334fef31c
- SHA512 17072416aee1aeea6afe7223994669eb2af3f11e4983d8847d00cf3b75d56ce2fcfdf300b7c24231376412ced430cfccc3a584a24eba6c9dc4eaea56f927bdaa
- SSDEEP 393216:x0jxLnarU8z7zhff4E3npAdtyLc3HwnPp/QgEfZl8cu+pVSFrY+4vJOE3T3yfVb:Sx79E7P3pSty6QnPt+r8cupdY+sJX3rG
- TLSH T10127331137E58472D0B20532D66AD36F69BABD721722C4CBF2D50AAD5D35AC28C39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.