Overview

overview

10

Static

static

3

2025-11-29...er.exe

windows10-2004-x64

10

2025-11-29...er.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2025-11-29_a551063781114617933c1ac7f8d9f9f6_amadey_coinminer_darkgate_elex_glassworm_hijackloader_revil_smoke-loader
  • Size 37.7MB
  • Sample251129-dsm6mszphs
  • SHA256 e7cce21cd65b21648155456fc7543bf0fafb3009e3d0289626712e671d4b2df1
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10
installer

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned binary was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

    installer

File Explorer

  • 2025-11-29_a551063781114617933c1ac7f8d9f9f6_amadey_coinminer_darkgate_elex_glassworm_hijackloader_revil_smoke-loader
    .exe 37.7MB

2025-11-29_a551063781114617933c1ac7f8d9f9f6_amadey_coinminer_darkgate_elex_glassworm_hijackloader_revil_smoke-loader

  • IMPHASH ac4ded70f85ef621e5f8917b250855be
  • SHA256 e7cce21cd65b21648155456fc7543bf0fafb3009e3d0289626712e671d4b2df1
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned binary was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

    installer

PE Signature issue

Digest
a5:35:67:1f:bc:3a:5b:93:8a:da:31:ee:af:6c:81:eb:f4:e9:28:57:7b:5e:83:9a:3b:3b:ab:36:48:28:83:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91450900MADKU3748H,CN=Meisi Software Development （Guangxi）Co.\, Ltd.,O=Meisi Software Development （Guangxi）Co.\, Ltd.,L=Yulin,ST=Guangxi,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130559756c696e,1.3.6.1.4.1.311.60.2.1.2=#13074775616e677869,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Nov 27, 2025

PE Signature issue

Digest
da:af:77:ef:8f:99:59:a7:d8:20:f9:4f:3f:91:2a:ed:e3:4f:26:2a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91450900MADKU3748H,CN=Meisi Software Development （Guangxi）Co.\, Ltd.,O=Meisi Software Development （Guangxi）Co.\, Ltd.,L=Yulin,ST=Guangxi,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130559756c696e,1.3.6.1.4.1.311.60.2.1.2=#13074775616e677869,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Nov 27, 2025

Minor OS version
1
Major OS version
6
Entry point
720480
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths