General

  • Target
    2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil
  • Size 2.2MB
  • Sample260701-ltdycsaz2p
  • SHA256 12de1d201f226fb5d9a56853af68b2cbb09da38efc23029ce05d8f1873536ba4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil
    .exe 2.2MB

2026-07-01_53e963b054e4849fb273eb4ef5db5009_coinminer_elex_floxif_glassworm_hijackloader_mespinoza_revil

  • IMPHASH 3bfd1dbdc1a07a4876d9337b335aae2e
  • SHA256 12de1d201f226fb5d9a56853af68b2cbb09da38efc23029ce05d8f1873536ba4
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
62:f2:c9:df:88:f9:95:4e:c6:a4:1d:3f:86:d3:04:fe:6b:83:9b:ae:3d:b5:ac:de:c8:62:07:1c:80:96:28:ed
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Paragon Software GmbH,O=Paragon Software GmbH,L=Freiburg,ST=Baden-Württemberg,C=DE
Minor OS version
0
Major OS version
6
Entry point
121841
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths