General
- Target 2026-08-20_ae49a984ab16b5924539347329a24297_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop
- Size 12.4MB
- Sample260820-f8j52abe76
- SHA256 25fb4d4cb82c90f31df2a2c537b03c5c2f215e75431d8a3766888ee3e3c35e82
- MD5 ae49a984ab16b5924539347329a24297
- SHA1 a5f9a720457b0f6ec273949509f3ed319ef73878
- SHA512 f1dcde31584f684720e597bdc276135eaa0f59a8254469efd87d8af7a8a563ded5ea7a2dd0d3548a35b2c104c343a82d3f2fbec5f877ccace01dc1070e7dde51
- SSDEEP 196608:L2x9/+1/muLzGKNqrsgiZBYPxU26zhQc5WdAJsGOdJAUcwti7TQlEtOvOL:L2x9/+ZqK+iZCPxUxanjGwtQQliO
- TLSH T1B6D6BEA2B99050F5E11B32B4202AD62F55F826328F2560EF36D07C7359353D35A37ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ae49a984ab16b5924539347329a24297_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ae49a984ab16b5924539347329a24297_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ae49a984ab16b5924539347329a24297_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop
- Size 12.4MB
- SHA256 25fb4d4cb82c90f31df2a2c537b03c5c2f215e75431d8a3766888ee3e3c35e82
- MD5 ae49a984ab16b5924539347329a24297
- SHA1 a5f9a720457b0f6ec273949509f3ed319ef73878
- SHA512 f1dcde31584f684720e597bdc276135eaa0f59a8254469efd87d8af7a8a563ded5ea7a2dd0d3548a35b2c104c343a82d3f2fbec5f877ccace01dc1070e7dde51
- SSDEEP 196608:L2x9/+1/muLzGKNqrsgiZBYPxU26zhQc5WdAJsGOdJAUcwti7TQlEtOvOL:L2x9/+ZqK+iZCPxUxanjGwtQQliO
- TLSH T1B6D6BEA2B99050F5E11B32B4202AD62F55F826328F2560EF36D07C7359353D35A37ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables calling ClearMyTracksByProcess
-
Detects executables manipulated with Fody