General
- Target 2026-11-14_f7920b03a1adcddb70d6b2f2feb2a841_amadey_coinminer_darkgate_elex_glassworm_icedid_poet-rat_quasar-rat_xrat
- Size 3.3MB
- Sample261114-13zzhswt6m
- SHA256 89ff01b27527a31a519eeace1d2e730957b23230a10e3011b52bbc26e7329bf7
- MD5 f7920b03a1adcddb70d6b2f2feb2a841
- SHA1 43d68b0cae1476ba7c639c9792a07bb2f8f1de2d
- SHA512 e1b26a709b49f0c781d97017eb30098f48de88f97daa712708b34a58eaca184e547a611223e8050a48c49ec77553cc28af0cd3b89d2caee6d10225f64aa3fd09
- SSDEEP 49152:Z5G+Ms80RUHLam2UH7AfVVuEGslTi/iJ4TjLZ+SwtHHBX2ehJNT:Z5GzFLam2vVVuEGslyiJYZ
- TLSH T167F55A2573F85E37E5AF9272C5B00002A7F1F86AF363DB1B2180A76A2D53B505D41BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-14_f7920b03a1adcddb70d6b2f2feb2a841_amadey_coinminer_darkgate_elex_glassworm_icedid_poet-rat_quasar-rat_xrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-14_f7920b03a1adcddb70d6b2f2feb2a841_amadey_coinminer_darkgate_elex_glassworm_icedid_poet-rat_quasar-rat_xrat
- Size 3.3MB
- SHA256 89ff01b27527a31a519eeace1d2e730957b23230a10e3011b52bbc26e7329bf7
- MD5 f7920b03a1adcddb70d6b2f2feb2a841
- SHA1 43d68b0cae1476ba7c639c9792a07bb2f8f1de2d
- SHA512 e1b26a709b49f0c781d97017eb30098f48de88f97daa712708b34a58eaca184e547a611223e8050a48c49ec77553cc28af0cd3b89d2caee6d10225f64aa3fd09
- SSDEEP 49152:Z5G+Ms80RUHLam2UH7AfVVuEGslTi/iJ4TjLZ+SwtHHBX2ehJNT:Z5GzFLam2vVVuEGslyiJYZ
- TLSH T167F55A2573F85E37E5AF9272C5B00002A7F1F86AF363DB1B2180A76A2D53B505D41BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Quasar payload
- Custom signature
Detects Windows executables referencing non-Windows User-Agents