General
- Target 2026-08-23_b5e4037a3bcdcf905c878f08408dd827_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader
- Size 13.8MB
- Sample260825-2ejs3azcmb
- SHA256 eec9d89e39f35d9f9d26f8138a025ec88ed1c71d99193c7338cdb17228dd09f3
- MD5 b5e4037a3bcdcf905c878f08408dd827
- SHA1 98aebeb4673cd115860a6eb0fe6b681379b440f4
- SHA512 af0b2c1157553c79653f5aa9ec76ceef10c590921ca97a739077bb894684684133c272c3bc7510712a457a60d9f02df8f10d16f6e2a7c593cd9f1b23e686fa2d
- SSDEEP 196608:TWruyy0dB+qs5AOhVvsnVW2AYTxFoSt3d3M0UvKGutR+/cawb91eOOBMMuS:Qy0doqXObgVJxLdd3M0Uvt/Y/EBpR
- TLSH T1BAE6F121B243C0B1C53606B5417B0B39DA395A120B65C9D3FEBCFCA89F316E2A27579D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b5e4037a3bcdcf905c878f08408dd827_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b5e4037a3bcdcf905c878f08408dd827_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader
- Size 13.8MB
- SHA256 eec9d89e39f35d9f9d26f8138a025ec88ed1c71d99193c7338cdb17228dd09f3
- MD5 b5e4037a3bcdcf905c878f08408dd827
- SHA1 98aebeb4673cd115860a6eb0fe6b681379b440f4
- SHA512 af0b2c1157553c79653f5aa9ec76ceef10c590921ca97a739077bb894684684133c272c3bc7510712a457a60d9f02df8f10d16f6e2a7c593cd9f1b23e686fa2d
- SSDEEP 196608:TWruyy0dB+qs5AOhVvsnVW2AYTxFoSt3d3M0UvKGutR+/cawb91eOOBMMuS:Qy0doqXObgVJxLdd3M0Uvt/Y/EBpR
- TLSH T1BAE6F121B243C0B1C53606B5417B0B39DA395A120B65C9D3FEBCFCA89F316E2A27579D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Loads dropped DLL