General
- Target 2026-08-10_2e31782230d32180e20f430ddb20d898_bandook_coinminer_darkgate_elex_gcleaner_glassworm_hijackloader
- Size 22.9MB
- Sample260810-mrzygsfe86
- SHA256 dfb1c6bae4c15cfcd7a67448e66a858a2390e5e9468f466289ba642481fe5463
- MD5 2e31782230d32180e20f430ddb20d898
- SHA1 1fe2baa2951c9bc77e11e7687c22af33a914b779
- SHA512 be23d2d3f4a3e8d7770ae1e037461af77ad6c4a1a49dd69bba1f04650f85b5e4fb6c2fa70d1bfb948648769d957789ad26cd87494979b941947c798380d9c5b5
- SSDEEP 393216:mvFxlWlewC9ov3UZb6+bJ8k5zhk2bg7SleMo3:AxlYew5vqG+KkhhRbtq
- TLSH T156379E22FA31C034D348C171ADB9EA33586CB5BEBB418527F6D5D74E67A23E0624528F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_2e31782230d32180e20f430ddb20d898_bandook_coinminer_darkgate_elex_gcleaner_glassworm_hijackloader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2e31782230d32180e20f430ddb20d898_bandook_coinminer_darkgate_elex_gcleaner_glassworm_hijackloader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2e31782230d32180e20f430ddb20d898_bandook_coinminer_darkgate_elex_gcleaner_glassworm_hijackloader
- Size 22.9MB
- SHA256 dfb1c6bae4c15cfcd7a67448e66a858a2390e5e9468f466289ba642481fe5463
- MD5 2e31782230d32180e20f430ddb20d898
- SHA1 1fe2baa2951c9bc77e11e7687c22af33a914b779
- SHA512 be23d2d3f4a3e8d7770ae1e037461af77ad6c4a1a49dd69bba1f04650f85b5e4fb6c2fa70d1bfb948648769d957789ad26cd87494979b941947c798380d9c5b5
- SSDEEP 393216:mvFxlWlewC9ov3UZb6+bJ8k5zhk2bg7SleMo3:AxlYew5vqG+KkhhRbtq
- TLSH T156379E22FA31C034D348C171ADB9EA33586CB5BEBB418527F6D5D74E67A23E0624528F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables packed with ASPack
-
Detects executables packed with Enigma
-
Detects packed executables observed in Molerats
-
Loads dropped DLL