General
- Target 2026-08-18_099d2560e9c950536fd5fcefba5e5da4_amadey_coinminer_darkgate_elex_glassworm_maze_revil_smoke-loader_stealc
- Size 7.8MB
- Sample260818-mhm8bs1yft
- SHA256 92899ec2422b7f38e11ddca74823a9178e320997b50104e56f63f2d062ba76ee
- MD5 099d2560e9c950536fd5fcefba5e5da4
- SHA1 3553ae4bf9f9414f1408a8f4b4b8b16eb6489575
- SHA512 7f4605eb105e52dd4814db2a49c4497865fcc361a0ae7cf1e71c7c54066f451b40206546ee200d9c31a6fba4797ca2fc0c84891792a8704942e1e893631f339b
- SSDEEP 196608:fZGFqks2TuWJJPBQEhu40jaJQUwvAVANHfFQXGctqXtAuA7wMQogJY+Im45OfT27:fZnks2TusPBRI40jaJQUwvAVANHfFQXR
- TLSH T15A8649322ACCCD3DDB970631786DE67B8019ED38E71590C796C0362ADB385F366B1A52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-18_099d2560e9c950536fd5fcefba5e5da4_amadey_coinminer_darkgate_elex_glassworm_maze_revil_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_099d2560e9c950536fd5fcefba5e5da4_amadey_coinminer_darkgate_elex_glassworm_maze_revil_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_099d2560e9c950536fd5fcefba5e5da4_amadey_coinminer_darkgate_elex_glassworm_maze_revil_smoke-loader_stealc
- Size 7.8MB
- SHA256 92899ec2422b7f38e11ddca74823a9178e320997b50104e56f63f2d062ba76ee
- MD5 099d2560e9c950536fd5fcefba5e5da4
- SHA1 3553ae4bf9f9414f1408a8f4b4b8b16eb6489575
- SHA512 7f4605eb105e52dd4814db2a49c4497865fcc361a0ae7cf1e71c7c54066f451b40206546ee200d9c31a6fba4797ca2fc0c84891792a8704942e1e893631f339b
- SSDEEP 196608:fZGFqks2TuWJJPBQEhu40jaJQUwvAVANHfFQXGctqXtAuA7wMQogJY+Im45OfT27:fZnks2TusPBRI40jaJQUwvAVANHfFQXR
- TLSH T15A8649322ACCCD3DDB970631786DE67B8019ED38E71590C796C0362ADB385F366B1A52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.