General
- Target 2026-08-09_9def3867f1335df7f887ae08463f7e9a_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 733KB
- Sample260809-q9ddzsgj2y
- SHA256 7653ac8a9cb5b8ae115310fa4c208297ee3eba415bbb5f38b4e67ea6b1f47a83
- MD5 9def3867f1335df7f887ae08463f7e9a
- SHA1 4dba4651efa79b483fb282634349dece48c11206
- SHA512 f83c0d39901ad1a68ce2d56009802b8734307ff643881c0d07def34e2849087397c1ed16908d8417bad2ca80993afce8f0749c0a913f2546f3211f5665bd8917
- SSDEEP 12288:Cmhj3dUlzn3DSudvsh8Awf3XFaZmBITVJPtSrE37yG2LmxM+t:1hLalj3DSudvGM3MXTVhtSQWGtxbt
- TLSH T17BF41221B1E08072F0A352348ABDD7619B2EBE625BA490DF778805AF1E716D1DF3431B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_9def3867f1335df7f887ae08463f7e9a_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_9def3867f1335df7f887ae08463f7e9a_amadey_coinminer_darkgate_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 733KB
- SHA256 7653ac8a9cb5b8ae115310fa4c208297ee3eba415bbb5f38b4e67ea6b1f47a83
- MD5 9def3867f1335df7f887ae08463f7e9a
- SHA1 4dba4651efa79b483fb282634349dece48c11206
- SHA512 f83c0d39901ad1a68ce2d56009802b8734307ff643881c0d07def34e2849087397c1ed16908d8417bad2ca80993afce8f0749c0a913f2546f3211f5665bd8917
- SSDEEP 12288:Cmhj3dUlzn3DSudvsh8Awf3XFaZmBITVJPtSrE37yG2LmxM+t:1hLalj3DSudvGM3MXTVhtSQWGtxbt
- TLSH T17BF41221B1E08072F0A352348ABDD7619B2EBE625BA490DF778805AF1E716D1DF3431B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Reflective DLL injection artifacts
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory