General
- Target 2026-09-07_fffd6a733e87fa5e3948af1039d62c39_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 3.0MB
- Sample260907-3nt6tsbh47
- SHA256 d14751d540ac3cd9f22472085cc5ea30596f1fd01feafd740d05ef52af6eccd9
- MD5 fffd6a733e87fa5e3948af1039d62c39
- SHA1 42808a208e5efedda5ad0da3ddafd58c0095a62b
- SHA512 2b1635ea64f85438d1862b8f8f2d5aa86d20b80df9b76698e691077f2a9d27e9862a2ea182b4c35f048a41621582b27f935988f61b91a6e78a90c25270faa634
- SSDEEP 49152:KHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMz:KnKdBWsM0r1Qn1K4XKH40Feq
- TLSH T1B1E59D12F7A0C036C4A7027589BA476EA678BD614B2547CBB3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_fffd6a733e87fa5e3948af1039d62c39_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_fffd6a733e87fa5e3948af1039d62c39_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_fffd6a733e87fa5e3948af1039d62c39_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 3.0MB
- SHA256 d14751d540ac3cd9f22472085cc5ea30596f1fd01feafd740d05ef52af6eccd9
- MD5 fffd6a733e87fa5e3948af1039d62c39
- SHA1 42808a208e5efedda5ad0da3ddafd58c0095a62b
- SHA512 2b1635ea64f85438d1862b8f8f2d5aa86d20b80df9b76698e691077f2a9d27e9862a2ea182b4c35f048a41621582b27f935988f61b91a6e78a90c25270faa634
- SSDEEP 49152:KHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMz:KnKdBWsM0r1Qn1K4XKH40Feq
- TLSH T1B1E59D12F7A0C036C4A7027589BA476EA678BD614B2547CBB3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory