Overview

overview

6

Static

static

3

2026-06-30...il.exe

windows10-2004-x64

6

2026-06-30...il.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil
  • Size 32.0MB
  • Sample260701-a79fmsbx4n
  • SHA256 3217d721394a34f42d77251e696709703e1cc7471723a810a9dd704be6a5f255
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

File Explorer

  • 2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil
    .exe 32.0MB

2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil

  • IMPHASH ac9bb3e20e6158d3de0aebe2bd83cbd9
  • SHA256 3217d721394a34f42d77251e696709703e1cc7471723a810a9dd704be6a5f255
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Embeds OpenSSL

    Embeds OpenSSL, may be used to circumvent TLS interception.

Digest
33:a9:59:db:ed:37:54:c2:11:11:b5:d3:42:a8:54:33:50:76:3f:e7:db:9c:29:14:26:f1:7e:34:95:c7:38:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=911101026662879416,CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,STREET=朝阳区酒仙桥路6号院2号楼1至19层104号内8层801,L=Beijing,ST=Beijing,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
3161129
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\vmagent_new\bin\joblist\984155\out\Release\GameAssistantSetup.pdb