General
- Target 2026-10-01_44ee980650c30f93307b428446e57ae1_amadey_coinminer_darkgate_elex_glassworm_ngrbot_remcos_rhadamanthys_smoke-loader_stop
- Size 12.1MB
- Sample261002-s56wvavdja
- SHA256 5348d7578bd9bbf36aa9408785ef3330ee0f200092188a4a19234b2d03e32779
- MD5 44ee980650c30f93307b428446e57ae1
- SHA1 83dd8d25923f37a95cb28de897187a3cd8d103b0
- SHA512 a80bfd78856f909ca1357aced46f1bfc85df1b0862746af8020719a6f8114b0e78dc2538bd1ba92ee9f73edbf77aec17b673bd0edca9acdf2cbd49bfe31aef3a
- SSDEEP 393216:E9xMa21XWfu63TV3J14+kKQMfKIah1Qm3j4W:GxO6jVzfHs
- TLSH T15CD6BE03B3E64125F5F31A745A7D5529492ABD311B34C0DFA2C92A4E4FF2EE2A931723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-01_44ee980650c30f93307b428446e57ae1_amadey_coinminer_darkgate_elex_glassworm_ngrbot_remcos_r.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_44ee980650c30f93307b428446e57ae1_amadey_coinminer_darkgate_elex_glassworm_ngrbot_remcos_r.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_44ee980650c30f93307b428446e57ae1_amadey_coinminer_darkgate_elex_glassworm_ngrbot_remcos_rhadamanthys_smoke-loader_stop
- Size 12.1MB
- SHA256 5348d7578bd9bbf36aa9408785ef3330ee0f200092188a4a19234b2d03e32779
- MD5 44ee980650c30f93307b428446e57ae1
- SHA1 83dd8d25923f37a95cb28de897187a3cd8d103b0
- SHA512 a80bfd78856f909ca1357aced46f1bfc85df1b0862746af8020719a6f8114b0e78dc2538bd1ba92ee9f73edbf77aec17b673bd0edca9acdf2cbd49bfe31aef3a
- SSDEEP 393216:E9xMa21XWfu63TV3J14+kKQMfKIah1Qm3j4W:GxO6jVzfHs
- TLSH T15CD6BE03B3E64125F5F31A745A7D5529492ABD311B34C0DFA2C92A4E4FF2EE2A931723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.