2026-05-30_8d2bd24c1d53193600e23f1a76bcd3fc_coinminer_elex_stop

General

Target
2026-05-30_8d2bd24c1d53193600e23f1a76bcd3fc_coinminer_elex_stop
Size 3.5MB
Sample260530-nap8dscy7k
SHA256 d4ed2e30e9888f3c57e16043155320f32689ef84edea6bc76ced9a72bcaca539
MD5 8d2bd24c1d53193600e23f1a76bcd3fc
SHA1 89cb05eac7a5931ee7933a297fc8e4278aafc4a7
SHA512 4e74a622e055619ecc040f9bd9044c126dac4adc13b671dd18928f885ae10600bc72b8e19d9e1789eeacafbc321092119cf0d75c526485872bc53fcb0850e1d6
SSDEEP 98304:SWkCqdJywOnEP7MHHQjgV4rAGEI0F1ZRg2MB:SEqdILnEP7MHtZLg2MB
TLSH
T1830602617390C035C75304B09E6ACBB99275F6A94B3285C3A3D05F1EAF74DD26B3A21B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-30_8d2bd24c1d53193600e23f1a76bcd3fc_coinminer_elex_stop

File Explorer

2026-05-30_8d2bd24c1d53193600e23f1a76bcd3fc_coinminer_elex_stop

.exe 3.5MB

2026-05-30_8d2bd24c1d53193600e23f1a76bcd3fc_coinminer_elex_stop

SHA256 d4ed2e30e9888f3c57e16043155320f32689ef84edea6bc76ced9a72bcaca539
MD5 8d2bd24c1d53193600e23f1a76bcd3fc
SHA1 89cb05eac7a5931ee7933a297fc8e4278aafc4a7
SHA512 4e74a622e055619ecc040f9bd9044c126dac4adc13b671dd18928f885ae10600bc72b8e19d9e1789eeacafbc321092119cf0d75c526485872bc53fcb0850e1d6
SSDEEP 98304:SWkCqdJywOnEP7MHHQjgV4rAGEI0F1ZRg2MB:SEqdILnEP7MHtZLg2MB
TLSH
T1830602617390C035C75304B09E6ACBB99275F6A94B3285C3A3D05F1EAF74DD26B3A21B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

653833

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

??0?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE@ABU012@@Z ??0?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE@XZ ??0?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE@XZ ??0?$kxThreadBase@VLocker@kbase@@@kbase@@QAE@XZ ??0ReportHelper@business_publish@@AAE@XZ ??1?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@UAE@XZ ??1?$kxThreadBase@VLocker@kbase@@@kbase@@UAE@XZ ??1ReportHelper@business_publish@@UAE@XZ ??4?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEAAU012@ABU012@@Z ??_7?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@6B@ ??_7?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@6B@ ??_7?$kxThreadBase@VLocker@kbase@@@kbase@@6B@ ??_7ReportHelper@business_publish@@6B?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@@ ??_7ReportHelper@business_publish@@6B?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@@ ?AddItem@ReportHelper@business_publish@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@@Z ?AddItem@ReportHelper@business_publish@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HAAV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@@Z ?AfterThreadFun@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@MAEXH@Z ?AfterThreadFun@?$kxThreadBase@VLocker@kbase@@@kbase@@MAEXH@Z ?BeginThreadFun@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@MAEXXZ ?BeginThreadFun@?$kxThreadBase@VLocker@kbase@@@kbase@@MAEXXZ ?GetHandle@?$kxThreadBase@VLocker@kbase@@@kbase@@QBEPAXXZ ?GetInstance@ReportHelper@business_publish@@SAPAV12@XZ ?Init@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEXPAU?$_CallBack@VKSimpleDirectInfoc@@@12@K@Z ?Initialzie@ReportHelper@business_publish@@QAE_NW4ReportType@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?Insert@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE_NABVKSimpleDirectInfoc@@@Z ?IsRunning@?$kxThreadBase@VLocker@kbase@@@kbase@@QAE_NXZ ?KCreateThread@?$kxThreadBase@VLocker@kbase@@@kbase@@SAPAXHP6GKPAX@Z0PAK0II@Z ?Kill@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@UAEHXZ ?Kill@?$kxThreadBase@VLocker@kbase@@@kbase@@UAEHXZ ?QueueThreadCallback@ReportHelper@business_publish@@MAEHKAAVKSimpleDirectInfoc@@@Z ?Report@ReportHelper@business_publish@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@PBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z ?ReportDirect@ReportHelper@business_publish@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@PBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z ?SetPriority@?$kxThreadBase@VLocker@kbase@@@kbase@@QAEHH@Z ?SetTimeOut@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEXK@Z ?Start@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEHXZ ?StartThread@?$kxThreadBase@VLocker@kbase@@@kbase@@IAEHPAX@Z ?Thread@?$kxThreadBase@VLocker@kbase@@@kbase@@AAEIPAX@Z ?Uninitialize@ReportHelper@business_publish@@QAEXXZ ?WaitKill@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@UAEHK@Z ?WaitKill@?$kxThreadBase@VLocker@kbase@@@kbase@@UAEHK@Z ?size@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEIXZ ?threadFun@?$kxThreadBase@VLocker@kbase@@@kbase@@CGIPAX@Z ?threadFunImpl@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@MAEHKPAX@Z

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-30_8d2bd24c1d53193600e23f1a76bcd3fc_coinminer_elex_stop

generic