General
- Target 2026-08-09_4e2d3027cc231bf346e9756c557ceb64_amadey_coinminer_darkgate_elex_glassworm_smoke-loader
- Size 37.6MB
- Sample260809-vc8k3sam4x
- SHA256 f1e56e7f175cef4bd4b7bd6ee6444a2cd22893b0f962850078d242b34f2be1a1
- MD5 4e2d3027cc231bf346e9756c557ceb64
- SHA1 a0bea424307ac1c6a6529e2a95bb92c461bbea33
- SHA512 690b476439d889f57a1a178c227c95b58e3fc184d4c1258c3f4b483dcb0f99dc02d69350b441e4ff6ef77e4a455bea02ff19b951e28af07325241830e211140d
- SSDEEP 786432:+5UtNzqfojkRh5rmY2Fb6/uLoQO/ifW4N3/:+5UtNzRkRfrmYEoX94
- TLSH T141872302FF8280B6C18E06F056AB277F7B7257D60B568DE367C07D045CF26E2A5B6186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4e2d3027cc231bf346e9756c557ceb64_amadey_coinminer_darkgate_elex_glassworm_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4e2d3027cc231bf346e9756c557ceb64_amadey_coinminer_darkgate_elex_glassworm_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4e2d3027cc231bf346e9756c557ceb64_amadey_coinminer_darkgate_elex_glassworm_smoke-loader
- Size 37.6MB
- SHA256 f1e56e7f175cef4bd4b7bd6ee6444a2cd22893b0f962850078d242b34f2be1a1
- MD5 4e2d3027cc231bf346e9756c557ceb64
- SHA1 a0bea424307ac1c6a6529e2a95bb92c461bbea33
- SHA512 690b476439d889f57a1a178c227c95b58e3fc184d4c1258c3f4b483dcb0f99dc02d69350b441e4ff6ef77e4a455bea02ff19b951e28af07325241830e211140d
- SSDEEP 786432:+5UtNzqfojkRh5rmY2Fb6/uLoQO/ifW4N3/:+5UtNzRkRfrmYEoX94
- TLSH T141872302FF8280B6C18E06F056AB277F7B7257D60B568DE367C07D045CF26E2A5B6186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Suspicious use of NtSetInformationThreadHideFromDebugger