General
- Target 2026-08-09_9d69d255a089c022579b1c94e1d64c99_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.6MB
- Sample260809-j92cgsxvdv
- SHA256 1ca0e5b7dca8d34571f00cac615baeae897491c3add5514feaddd81cb42b3110
- MD5 9d69d255a089c022579b1c94e1d64c99
- SHA1 903e530ad76ca9d6f186c9cb584bfe7da7eb9e33
- SHA512 91b17514ef5a6eb393ecec93834bbfb7ea358cdf50b0f8a4125edd6b68353b502931a2c2d008ef8c6c4f6f3cf27b968279d9832e0a947dd1d134ae35636f21a2
- SSDEEP 24576:kvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAOjHp:kHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG+
- TLSH T1F175AE21B751C036D4AB01758AB98BAEA578BD310B2551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_9d69d255a089c022579b1c94e1d64c99_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_9d69d255a089c022579b1c94e1d64c99_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_9d69d255a089c022579b1c94e1d64c99_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.6MB
- SHA256 1ca0e5b7dca8d34571f00cac615baeae897491c3add5514feaddd81cb42b3110
- MD5 9d69d255a089c022579b1c94e1d64c99
- SHA1 903e530ad76ca9d6f186c9cb584bfe7da7eb9e33
- SHA512 91b17514ef5a6eb393ecec93834bbfb7ea358cdf50b0f8a4125edd6b68353b502931a2c2d008ef8c6c4f6f3cf27b968279d9832e0a947dd1d134ae35636f21a2
- SSDEEP 24576:kvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAOjHp:kHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG+
- TLSH T1F175AE21B751C036D4AB01758AB98BAEA578BD310B2551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory