2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar

General

Target
2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar
Size 1.3MB
Sample260416-tchh8aev6l
SHA256 afef81d905fd11f878a9a2271398dd3caf5860dee53e2eab41c7fce7b5e8ab33
MD5 968bb3534158da14a1a94189ebaba749
SHA1 4c2ff0b47227b008f4ff867b8932609d9cc6a3a6
SHA512 9a554bdef5508c7ccafe7262799021855a9ca255b2e0d1983a977b87a70a0a659c5db204859d521339e2f52aa8a25b07c912088b673d6ce0c3b89384826f2404
SSDEEP 24576:WbH+V3WnIZuMCxezot7kGFYKWoSip2ZzrTEJVJTt4D7/SAOZi+5v48cKfP:WbH+VLZ5zot7k1KRXpyPSVBXdc6
TLSH
T1C955C03272A040B2E2F35136EA249630FD7DBD241720D59E93D8BA1E3F365919B77722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar

2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar

.exe 1.3MB

SHA256 afef81d905fd11f878a9a2271398dd3caf5860dee53e2eab41c7fce7b5e8ab33
MD5 968bb3534158da14a1a94189ebaba749
SHA1 4c2ff0b47227b008f4ff867b8932609d9cc6a3a6
SHA512 9a554bdef5508c7ccafe7262799021855a9ca255b2e0d1983a977b87a70a0a659c5db204859d521339e2f52aa8a25b07c912088b673d6ce0c3b89384826f2404
SSDEEP 24576:WbH+V3WnIZuMCxezot7kGFYKWoSip2ZzrTEJVJTt4D7/SAOZi+5v48cKfP:WbH+VLZ5zot7k1KRXpyPSVBXdc6
TLSH
T1C955C03272A040B2E2F35136EA249630FD7DBD241720D59E93D8BA1E3F365919B77722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

104992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths