General
- Target 2026-08-11_b086c6e829436af9bbcdc36cd5b8365a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- Sample260811-fn72csssdw
- SHA256 faece4548f149b4001bb015fca8f38da5200c1947819980b46e2a419d8854311
- MD5 b086c6e829436af9bbcdc36cd5b8365a
- SHA1 40dd1d3ecf053314a1219901c5bb35a953fcd7c9
- SHA512 0187461055134d079dac46a7a01da1f2e11470db2da28285e8863c16611e11ac1692e07683e09f6182476190a88b394a9918cdb14a610deab9e7d32eb27593c8
- SSDEEP 393216:kXexLnarU8z7zhff4E3npAdi5Lc6HwnHy3Mq3YZFiRk1qhy/6Oa9fosrJL4t8:vx79E7P3pSi5HQnHgJYnyvhG6j9f1c8
- TLSH T1D827331277C69075E2B11672A56AD36B247AFD705A32C4CFB7C509AE0935AC38D38F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_b086c6e829436af9bbcdc36cd5b8365a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_b086c6e829436af9bbcdc36cd5b8365a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_b086c6e829436af9bbcdc36cd5b8365a_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- SHA256 faece4548f149b4001bb015fca8f38da5200c1947819980b46e2a419d8854311
- MD5 b086c6e829436af9bbcdc36cd5b8365a
- SHA1 40dd1d3ecf053314a1219901c5bb35a953fcd7c9
- SHA512 0187461055134d079dac46a7a01da1f2e11470db2da28285e8863c16611e11ac1692e07683e09f6182476190a88b394a9918cdb14a610deab9e7d32eb27593c8
- SSDEEP 393216:kXexLnarU8z7zhff4E3npAdi5Lc6HwnHy3Mq3YZFiRk1qhy/6Oa9fosrJL4t8:vx79E7P3pSi5HQnHgJYnyvhG6j9f1c8
- TLSH T1D827331277C69075E2B11672A56AD36B247AFD705A32C4CFB7C509AE0935AC38D38F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.