General
- Target 2026-09-10_1be70a4c2d20d27e211f5e8d0350fef2_coinminer_darkgate_elex_emotet_mafia
- Size 3.2MB
- Sample260910-x46a5svdlh
- SHA256 95b2d3bf50ae7c9f80001dcfe79f44408f9d81824d95bafcf735ef8a0292c8f6
- MD5 1be70a4c2d20d27e211f5e8d0350fef2
- SHA1 5df8bb77922d6bb7e1207b8a8c84bfb518d2acc1
- SHA512 43afd123c183769605dbc257d8aadacf0099a89ee8cf45f2f99c396faa3c8b9b3922dc3892e774c97ad1de55ba9cbe6750b63e370265cc7cb16e422d8bdd536a
- SSDEEP 98304:3fyIKjZm2Jm3H+3OuZyBIOYP0HOb4rC5W/KMZKWKKFTkFdRMkVTKAZGTo3D527Bx:P8ZHZIYLb4rC56o3VQBWG
- TLSH T17AF5BF217761C076D5632530565AD3B8E1F9AD304E39423762D1BF3D6AF0A42EA3CA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_1be70a4c2d20d27e211f5e8d0350fef2_coinminer_darkgate_elex_emotet_mafia.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_1be70a4c2d20d27e211f5e8d0350fef2_coinminer_darkgate_elex_emotet_mafia
- Size 3.2MB
- SHA256 95b2d3bf50ae7c9f80001dcfe79f44408f9d81824d95bafcf735ef8a0292c8f6
- MD5 1be70a4c2d20d27e211f5e8d0350fef2
- SHA1 5df8bb77922d6bb7e1207b8a8c84bfb518d2acc1
- SHA512 43afd123c183769605dbc257d8aadacf0099a89ee8cf45f2f99c396faa3c8b9b3922dc3892e774c97ad1de55ba9cbe6750b63e370265cc7cb16e422d8bdd536a
- SSDEEP 98304:3fyIKjZm2Jm3H+3OuZyBIOYP0HOb4rC5W/KMZKWKKFTkFdRMkVTKAZGTo3D527Bx:P8ZHZIYLb4rC56o3VQBWG
- TLSH T17AF5BF217761C076D5632530565AD3B8E1F9AD304E39423762D1BF3D6AF0A42EA3CA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1