General
- Target 2026-08-25_708eeddfa399bde37ee62bc1c6a49738_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop
- Size 12.5MB
- Sample260826-1pyvasbn81
- SHA256 4271f50539a763a4117e194a7028d4d4abbabbbcf541d6d41b72efbb08688c07
- MD5 708eeddfa399bde37ee62bc1c6a49738
- SHA1 ce613ec4e7de8ce321aa3479afa9bff9eaa4970b
- SHA512 564dbd138db1cea2ef9c48e92793d7de09493fd427fcf74e211d3968c5eb142d1f209deb9898ba4affa1e99e32ecb14453692ae6cca3e270dbdec26036695966
- SSDEEP 196608:LMgx9/+1/muLzGKNqrsgiZBYPxU26zhQc5WdAJsGOdJAUcwti7TQlEtOvOL:LMgx9/+ZqK+iZCPxUxanjGwtQQliO
- TLSH T153D6BDA2B99050F5E11B32B4202AD62F55F82A328F2560EF35D07C7359353D35A37ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-25_708eeddfa399bde37ee62bc1c6a49738_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_708eeddfa399bde37ee62bc1c6a49738_amadey_coinminer_darkgate_elex_glassworm_redline-stealer_smoke-loader_stop
- Size 12.5MB
- SHA256 4271f50539a763a4117e194a7028d4d4abbabbbcf541d6d41b72efbb08688c07
- MD5 708eeddfa399bde37ee62bc1c6a49738
- SHA1 ce613ec4e7de8ce321aa3479afa9bff9eaa4970b
- SHA512 564dbd138db1cea2ef9c48e92793d7de09493fd427fcf74e211d3968c5eb142d1f209deb9898ba4affa1e99e32ecb14453692ae6cca3e270dbdec26036695966
- SSDEEP 196608:LMgx9/+1/muLzGKNqrsgiZBYPxU26zhQc5WdAJsGOdJAUcwti7TQlEtOvOL:LMgx9/+ZqK+iZCPxUxanjGwtQQliO
- TLSH T153D6BDA2B99050F5E11B32B4202AD62F55F82A328F2560EF35D07C7359353D35A37ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables calling ClearMyTracksByProcess
-
Detects executables manipulated with Fody
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.