General
- Target 2026-08-12_2a1a082b21229d4b9957122bedd1db5c_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.6MB
- Sample260813-bzerqshm8t
- SHA256 78e62bebbe3eb876bcf0bbb7b25454bebff8718e04295ecf3ab203d61cb14e27
- MD5 2a1a082b21229d4b9957122bedd1db5c
- SHA1 95138d706a2a7814a381f4818ade5566446aa0e2
- SHA512 bb711fba3d52d290ab6212143f2c481fb4a7b1294939a0380d4f5735984390e2897907a8ee41a4abc05a1692cea252d1354c9b9744e7060a1572a9da8d7cf03f
- SSDEEP 24576:bvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:bHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T171759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_2a1a082b21229d4b9957122bedd1db5c_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_2a1a082b21229d4b9957122bedd1db5c_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_2a1a082b21229d4b9957122bedd1db5c_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 1.6MB
- SHA256 78e62bebbe3eb876bcf0bbb7b25454bebff8718e04295ecf3ab203d61cb14e27
- MD5 2a1a082b21229d4b9957122bedd1db5c
- SHA1 95138d706a2a7814a381f4818ade5566446aa0e2
- SHA512 bb711fba3d52d290ab6212143f2c481fb4a7b1294939a0380d4f5735984390e2897907a8ee41a4abc05a1692cea252d1354c9b9744e7060a1572a9da8d7cf03f
- SSDEEP 24576:bvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:bHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T171759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory