2026-08-24_fc36fbe447e272a400c8658abdd74612_amadey_coinminer_darkgate_fabookie_smoke-loader_stop

General

Target
2026-08-24_fc36fbe447e272a400c8658abdd74612_amadey_coinminer_darkgate_fabookie_smoke-loader_stop
Size 3.4MB
Sample260824-xtjdmasdnf
SHA256 2bf28c325e147d62ff74c4c35a6d5c3914e7fb51108c3ec0433fef3f94a81832
MD5 fc36fbe447e272a400c8658abdd74612
SHA1 b9541d9fe175b3850b67fd90f297e4bd60430a16
SHA512 b963ce6224da2d7d3065a912711c55692a453c978dbe787e82200fcdd4d08c10f0313174c3bd5f029fadcd2a9b4f2dc3b7e067173c0d29e694f25f4ca8d403db
SSDEEP 49152:Mss1T60g7mM+M6RkMkIM7I067aNRoJdXN0BMOwLloBrug1hKPgssSt2g:IFM+M6RkMkIM7BNCJdXN0B7+sPhv7St
TLSH
T1B6F53A0266D44075ECBE5E7099759634F562BC7FBD3EB10E2E80321E19B36C1A926B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_fc36fbe447e272a400c8658abdd74612_amadey_coinminer_darkgate_fabookie_smoke-loader_stop

File Explorer

2026-08-24_fc36fbe447e272a400c8658abdd74612_amadey_coinminer_darkgate_fabookie_smoke-loader_stop

.exe 3.4MB

2026-08-24_fc36fbe447e272a400c8658abdd74612_amadey_coinminer_darkgate_fabookie_smoke-loader_stop

IMPHASH 8d0049281f7a49486287791e14061feb
SHA256 2bf28c325e147d62ff74c4c35a6d5c3914e7fb51108c3ec0433fef3f94a81832
MD5 fc36fbe447e272a400c8658abdd74612
SHA1 b9541d9fe175b3850b67fd90f297e4bd60430a16
SHA512 b963ce6224da2d7d3065a912711c55692a453c978dbe787e82200fcdd4d08c10f0313174c3bd5f029fadcd2a9b4f2dc3b7e067173c0d29e694f25f4ca8d403db
SSDEEP 49152:Mss1T60g7mM+M6RkMkIM7I067aNRoJdXN0BMOwLloBrug1hKPgssSt2g:IFM+M6RkMkIM7BNCJdXN0B7+sPhv7St
TLSH
T1B6F53A0266D44075ECBE5E7099759634F562BC7FBD3EB10E2E80321E19B36C1A926B33
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

40668

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\re\jdk7u45\229\build\windows-amd64\tmp\java\java\obj64\java.pdb

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA RegEnumKeyA

user32

MessageBoxA

comctl32

InitCommonControlsEx

kernel32

CreateFileW GetCommandLineA GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose GetModuleHandleW ExitProcess DecodePointer EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapFree FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA MultiByteToWideChar GetFileAttributesA ExitThread GetCurrentThreadId CreateThread InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentProcess FlsGetValue FlsSetValue FlsFree SetLastError FlsAlloc RtlUnwindEx WriteFile GetStdHandle GetModuleFileNameW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoW HeapSetInformation GetVersion HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableW SetEnvironmentVariableA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize CompareStringW SetFilePointer ReadFile WriteConsoleW GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_fc36fbe447e272a400c8658abdd74612_amadey_coinminer_darkgate_fabookie_smoke-loader_stop

advapi32

user32

comctl32

kernel32

generic