General
- Target 2026-09-29_49449f40b0011d3cc9fa2236d1e162ea_coinminer_darkgate_elex_mafia_smoke-loader
- Size 3.1MB
- Sample260930-calz7acb92
- SHA256 aa1c04ec4c47009ba5e36deddab1c61280c00110f1a2d8b8085c99fc89802b2d
- MD5 49449f40b0011d3cc9fa2236d1e162ea
- SHA1 1dbaeb28afe1364c5616d516f92c30db39164108
- SHA512 d082c00b982944184a7930dfc7a73c400eea714e7e60ed2a87f7fac813922ea457544bf00d70969624f53f1e744a114b9baf9b9c3cc01e8996ba54871b68b4bc
- SSDEEP 49152:3Db/3lziLR+PIgtpYfUUeLR+0cuGAI/L2KEh6PQ09y:3Db/3lzARoI4pmOR+0rGrj2o4
- TLSH T18EE5BFE0BAC7C276D5B200B28D6B974F9019EE25072D2CD76388291E6D706D35FF2627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_49449f40b0011d3cc9fa2236d1e162ea_coinminer_darkgate_elex_mafia_smoke-loader.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_49449f40b0011d3cc9fa2236d1e162ea_coinminer_darkgate_elex_mafia_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_49449f40b0011d3cc9fa2236d1e162ea_coinminer_darkgate_elex_mafia_smoke-loader
- Size 3.1MB
- SHA256 aa1c04ec4c47009ba5e36deddab1c61280c00110f1a2d8b8085c99fc89802b2d
- MD5 49449f40b0011d3cc9fa2236d1e162ea
- SHA1 1dbaeb28afe1364c5616d516f92c30db39164108
- SHA512 d082c00b982944184a7930dfc7a73c400eea714e7e60ed2a87f7fac813922ea457544bf00d70969624f53f1e744a114b9baf9b9c3cc01e8996ba54871b68b4bc
- SSDEEP 49152:3Db/3lziLR+PIgtpYfUUeLR+0cuGAI/L2KEh6PQ09y:3Db/3lzARoI4pmOR+0rGrj2o4
- TLSH T18EE5BFE0BAC7C276D5B200B28D6B974F9019EE25072D2CD76388291E6D706D35FF2627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory