General
- Target 2026-08-15_dd5e3d1338825c4b330fe2161c5ffd21_amadey_coinminer_darkgate_elex_glassworm_hijackloader_krakenkeylogger_njrat_revil
- Size 116.0MB
- Sample260815-dpfmdsxfpe
- SHA256 8029b5372a059a57baec2bbdb921645f0cdc7b97608a74821bcd506500f59770
- MD5 dd5e3d1338825c4b330fe2161c5ffd21
- SHA1 3019ed0ff55e164ef1df3801088e0b22ba128a50
- SHA512 fe6ab757ce10ebc9698fb3f16eef24fef35cb20c88b9985928adf4e9a30157afcab1d731c94e6c5a7cdf83d922a25a873d003b723821b9c67bac68b12a7f1853
- SSDEEP 1572864:LiGa+gr9f7iFbncz7Cxb7SxS7N4Zj7Dbvn3fzrf37jPHn9J:82bnczxS8j7Dbvn3fzrf37jPHn9J
- TLSH T1DF488E1362E9AE9BF6F602309676D6F08679BD594336C2DF1480F99938703D17E313A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_dd5e3d1338825c4b330fe2161c5ffd21_amadey_coinminer_darkgate_elex_glassworm_hijackloader_kr.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_dd5e3d1338825c4b330fe2161c5ffd21_amadey_coinminer_darkgate_elex_glassworm_hijackloader_kr.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_dd5e3d1338825c4b330fe2161c5ffd21_amadey_coinminer_darkgate_elex_glassworm_hijackloader_krakenkeylogger_njrat_revil
- Size 116.0MB
- SHA256 8029b5372a059a57baec2bbdb921645f0cdc7b97608a74821bcd506500f59770
- MD5 dd5e3d1338825c4b330fe2161c5ffd21
- SHA1 3019ed0ff55e164ef1df3801088e0b22ba128a50
- SHA512 fe6ab757ce10ebc9698fb3f16eef24fef35cb20c88b9985928adf4e9a30157afcab1d731c94e6c5a7cdf83d922a25a873d003b723821b9c67bac68b12a7f1853
- SSDEEP 1572864:LiGa+gr9f7iFbncz7Cxb7SxS7N4Zj7Dbvn3fzrf37jPHn9J:82bnczxS8j7Dbvn3fzrf37jPHn9J
- TLSH T1DF488E1362E9AE9BF6F602309676D6F08679BD594336C2DF1480F99938703D17E313A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.