General

  • Target
    2026-06-27_a66c12633acb53bddf8c8f287a0f4cc1_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil
  • Size 4.4MB
  • Sample260629-ev7thacz2v
  • SHA256 5c8af853a4d7a5a58d0e8bb029f351ab6d5dd6c96a8589a5b2182ceeb0a1a75c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-06-27_a66c12633acb53bddf8c8f287a0f4cc1_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil
    .exe 4.4MB

2026-06-27_a66c12633acb53bddf8c8f287a0f4cc1_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil

  • IMPHASH da47d8bdd0a9748df116b482e6176b1f
  • SHA256 5c8af853a4d7a5a58d0e8bb029f351ab6d5dd6c96a8589a5b2182ceeb0a1a75c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects Windows executables referencing non-Windows User-Agents

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
46:f3:92:49:64:3a:ee:5b:39:ee:e4:d8:e4:70:de:95:b9:b5:49:19:a7:44:a5:43:64:8c:eb:e5:3c:c9:13:16
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=SIA Circle Solutions,O=SIA Circle Solutions,ST=Rīga,C=LV

PE Signature issue

Digest
8e:5c:55:30:b7:6c:bc:bb:9a:89:4b:28:0b:24:86:f1:87:31:d8:7e
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=SIA Circle Solutions,O=SIA Circle Solutions,ST=Rīga,C=LV
Minor OS version
0
Major OS version
6
Entry point
2482496
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths