General
- Target 2026-08-23_d96bd7ffe5448ea54502fdcca977da72_amadey_coinminer_darkgate_elex_glassworm_olympic-destroyer_poet-rat_quasar-rat_smoke-loader
- Size 53.3MB
- Sample260823-xtgj2atyhs
- SHA256 7de4b2c80a6837a48216932013889e9c7148f11e63bf09721b5aa5b29700e6bd
- MD5 d96bd7ffe5448ea54502fdcca977da72
- SHA1 8921ae4b6cc3040de858de6093af998d3b032c11
- SHA512 b1a68644c8f7a3d5a886d6ccd173c3cb09acfdb600b93e737aee3067a564a606595ef400256f6271fb2449bda55054432e44feb9127ff8e6061c1757af743ae3
- SSDEEP 1572864:gm0XsmjPyZmtmuwKl7E2LmZBpbCV6ZE5GSQiOjEBkqYnIgJM0cAZv7SGdAcA689d:kjPyZxuwzS66
- TLSH T1E7C7AE01B6E8863DF19F0E759966E79D93B9AE1203728B4F1914F4E91D333E11C283A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_d96bd7ffe5448ea54502fdcca977da72_amadey_coinminer_darkgate_elex_glassworm_olympic-destroy.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_d96bd7ffe5448ea54502fdcca977da72_amadey_coinminer_darkgate_elex_glassworm_olympic-destroy.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_d96bd7ffe5448ea54502fdcca977da72_amadey_coinminer_darkgate_elex_glassworm_olympic-destroyer_poet-rat_quasar-rat_smoke-loader
- Size 53.3MB
- SHA256 7de4b2c80a6837a48216932013889e9c7148f11e63bf09721b5aa5b29700e6bd
- MD5 d96bd7ffe5448ea54502fdcca977da72
- SHA1 8921ae4b6cc3040de858de6093af998d3b032c11
- SHA512 b1a68644c8f7a3d5a886d6ccd173c3cb09acfdb600b93e737aee3067a564a606595ef400256f6271fb2449bda55054432e44feb9127ff8e6061c1757af743ae3
- SSDEEP 1572864:gm0XsmjPyZmtmuwKl7E2LmZBpbCV6ZE5GSQiOjEBkqYnIgJM0cAZv7SGdAcA689d:kjPyZxuwzS66
- TLSH T1E7C7AE01B6E8863DF19F0E759966E79D93B9AE1203728B4F1914F4E91D333E11C283A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL