General
- Target 2026-08-10_7b4f56bb3aa171bbc274812057e0c199_coinminer_cryptbot_darkgate_elex_glassworm_poet-rat_stop
- Size 21.0MB
- Sample260810-cvtkrshm8y
- SHA256 d4f90686757ef9b9332708fe27b22c3add8984b4bb302e4349e15d971a1fd3a3
- MD5 7b4f56bb3aa171bbc274812057e0c199
- SHA1 b5524bfd72202398f880092c4557838d9abf6616
- SHA512 aeb1a7be484c61beed24ee31994dc0ba0015788a72d1968f46d414450dba7894cdb5abf1c176ec5bdefbd7998ac80d486920c29ca8b6e564696834b1e84eeb26
- SSDEEP 196608:vBBBBABBBBABBBBABBBBABBBBABBBBABBBBsHh6ImzD+FG:Jp
- TLSH T18D278D10F6C28035F56319724ABFD33E5538B9214F298ACFE3880B6E9D71AE1A935717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_7b4f56bb3aa171bbc274812057e0c199_coinminer_cryptbot_darkgate_elex_glassworm_poet-rat_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_7b4f56bb3aa171bbc274812057e0c199_coinminer_cryptbot_darkgate_elex_glassworm_poet-rat_stop.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_7b4f56bb3aa171bbc274812057e0c199_coinminer_cryptbot_darkgate_elex_glassworm_poet-rat_stop
- Size 21.0MB
- SHA256 d4f90686757ef9b9332708fe27b22c3add8984b4bb302e4349e15d971a1fd3a3
- MD5 7b4f56bb3aa171bbc274812057e0c199
- SHA1 b5524bfd72202398f880092c4557838d9abf6616
- SHA512 aeb1a7be484c61beed24ee31994dc0ba0015788a72d1968f46d414450dba7894cdb5abf1c176ec5bdefbd7998ac80d486920c29ca8b6e564696834b1e84eeb26
- SSDEEP 196608:vBBBBABBBBABBBBABBBBABBBBABBBBABBBBsHh6ImzD+FG:Jp
- TLSH T18D278D10F6C28035F56319724ABFD33E5538B9214F298ACFE3880B6E9D71AE1A935717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1