General
- Target 2026-08-25_c75dbed13ac6a724ffb1e3011004f5b7_amadey_coinminer_darkgate_elex_glassworm_hijackloader_olympic-destroyer_poet-rat_quasar-rat_smoke-loader
- Size 53.4MB
- Sample260826-l2harawfmb
- SHA256 6aa927e9df5c834481ce30849f1c7cbfd67e1a25362fa607d4cfbd5830c1da97
- MD5 c75dbed13ac6a724ffb1e3011004f5b7
- SHA1 918b600db1f9188cb0b28f96ca8c2d0669a95541
- SHA512 ccb8adc9ac8936369182bf07769e3498988bf324b56e04bd7cd5c6e85b57dc183c32e63709ba41f3b87ce4ba8cbdf16da9cc8b2ec7b8e342c12c396aac27a8f0
- SSDEEP 1572864:3H0XsmjPyZmtpu89ojtaMUfDbCV6ZE5GSQiOjEBkqYnIgJM0cAZv7SGdAcA68984:gjPyZEu8DfK62
- TLSH T1AEC7AE02B6E88779E19F0B719862F79D93B9AA1103719F8F1814F4E91D333A15C353AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c75dbed13ac6a724ffb1e3011004f5b7_amadey_coinminer_darkgate_elex_glassworm_hijackloader_ol.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c75dbed13ac6a724ffb1e3011004f5b7_amadey_coinminer_darkgate_elex_glassworm_hijackloader_ol.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c75dbed13ac6a724ffb1e3011004f5b7_amadey_coinminer_darkgate_elex_glassworm_hijackloader_olympic-destroyer_poet-rat_quasar-rat_smoke-loader
- Size 53.4MB
- SHA256 6aa927e9df5c834481ce30849f1c7cbfd67e1a25362fa607d4cfbd5830c1da97
- MD5 c75dbed13ac6a724ffb1e3011004f5b7
- SHA1 918b600db1f9188cb0b28f96ca8c2d0669a95541
- SHA512 ccb8adc9ac8936369182bf07769e3498988bf324b56e04bd7cd5c6e85b57dc183c32e63709ba41f3b87ce4ba8cbdf16da9cc8b2ec7b8e342c12c396aac27a8f0
- SSDEEP 1572864:3H0XsmjPyZmtpu89ojtaMUfDbCV6ZE5GSQiOjEBkqYnIgJM0cAZv7SGdAcA68984:gjPyZEu8DfK62
- TLSH T1AEC7AE02B6E88779E19F0B719862F79D93B9AA1103719F8F1814F4E91D333A15C353AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL