Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 03:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_e0809d41c3024c5251e339f5fe2448e4_coinminer_darkgate_elex_gcleaner_magniber_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_e0809d41c3024c5251e339f5fe2448e4_coinminer_darkgate_elex_gcleaner_magniber_stop.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-09-07_e0809d41c3024c5251e339f5fe2448e4_coinminer_darkgate_elex_gcleaner_magniber_stop.exe
- Size 9.6MB
- Sample260908-d7qkback8w
- SHA256 59db55006de4e6d67aba2d18b4217d3c4381a259bcc4b7c8d1ad3a54d7eb5062
- MD5 e0809d41c3024c5251e339f5fe2448e4
- SHA1 2620717a73b16956aa050795ebca679449ce38ce
- SHA512 fc92da634035e74b35abaa3ad3444c5240e496a1ac6977c067b05214eeea67a5928d7e194312603ab0a55163fe21927511d2417ac936f853453f6d32c3c1f74d
- SSDEEP 196608:BLGgLXmWPANRAPEXJ4hgXouAohPNiHOCJ8IS9sWaSzBz:BLfXi6PY4+Xo9MiHOCJ8IU6SBz
- TLSH T139A6D041BFD5C0B1EA8A11BA466E772B0A31EF541734CED3E3603E1AD9706E16D362C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-07_e0809d41c3024c5251e339f5fe2448e4_coinminer_darkgate_elex_gcleaner_magniber_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-07_e0809d41c3024c5251e339f5fe2448e4_coinminer_darkgate_elex_gcleaner_magniber_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-07_e0809d41c3024c5251e339f5fe2448e4_coinminer_darkgate_elex_gcleaner_magniber_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4852