General
- Target 2026-10-28_4fec8e7005649f47cbc069782aa40e1a_coinminer_darkgate_elex_gcleaner_glassworm_helldown_lost-door_zxxz
- Size 48.3MB
- Sample261030-ffth1ahs9t
- SHA256 83983a693f744d28aa97b041302940de5e2b43ef847dbb55c8e37c2fccecf32a
- MD5 4fec8e7005649f47cbc069782aa40e1a
- SHA1 bb47a2e21d0e61c5108828db7b21a13c01cf214b
- SHA512 ef20c1a1bda17a802e9814e17a84a037bfe14a93f67f9906afe0184c80ee755eea28878348783d80253c7d344e74cf545d90a4b7cea355586df6e49ebfa68805
- SSDEEP 393216:uQSfx3U2G7W21j+51Jp6kG3wYqYRk4wzceB6Cnr8nr6PAEFwqdI0engGY4ExnfQC:Ix0RjkD6qLGj2rWExEtHj9PTyWu2Y
- TLSH T12CB77C46FA8748F2ED23063145DBE37F1735EE018521DFA7EB0CBA29EE376512919206
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_4fec8e7005649f47cbc069782aa40e1a_coinminer_darkgate_elex_gcleaner_glassworm_helldown_lost-door_zxxz.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_4fec8e7005649f47cbc069782aa40e1a_coinminer_darkgate_elex_gcleaner_glassworm_helldown_lost-door_zxxz
- Size 48.3MB
- SHA256 83983a693f744d28aa97b041302940de5e2b43ef847dbb55c8e37c2fccecf32a
- MD5 4fec8e7005649f47cbc069782aa40e1a
- SHA1 bb47a2e21d0e61c5108828db7b21a13c01cf214b
- SHA512 ef20c1a1bda17a802e9814e17a84a037bfe14a93f67f9906afe0184c80ee755eea28878348783d80253c7d344e74cf545d90a4b7cea355586df6e49ebfa68805
- SSDEEP 393216:uQSfx3U2G7W21j+51Jp6kG3wYqYRk4wzceB6Cnr8nr6PAEFwqdI0engGY4ExnfQC:Ix0RjkD6qLGj2rWExEtHj9PTyWu2Y
- TLSH T12CB77C46FA8748F2ED23063145DBE37F1735EE018521DFA7EB0CBA29EE376512919206
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)