General

  • Target
    2026-05-11_2cf4467e6d36b7b15b7704ebccc9ad46_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader_zxxz
  • Size 28.2MB
  • Sample260511-qa111aaw2x
  • SHA256 056f4378adf6c9472cc74569fa6aaf67b2cb205de7db4739b28b80c6a8a28e1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-05-11_2cf4467e6d36b7b15b7704ebccc9ad46_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader_zxxz
    .exe 28.2MB

2026-05-11_2cf4467e6d36b7b15b7704ebccc9ad46_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader_zxxz

  • IMPHASH a8353932f2fa14f1ec925f77c97fead0
  • SHA256 056f4378adf6c9472cc74569fa6aaf67b2cb205de7db4739b28b80c6a8a28e1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
26:be:38:a5:8f:f8:47:e7:fc:ab:d3:81:ae:c5:89:78:8c:0a:31:bd:78:a5:a3:c0:4b:57:3c:1e:f0:aa:3c:2c
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Minor OS version
1
Major OS version
5
Entry point
33221
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\src\p4\sw\dev\gfclient\dev\common\nodejs\11.13.0\source\Release\NVIDIA Web Helper.pdb