General

  • Target
    2026-07-02_1ac4717d1f525f94f941a086fdce0f89_amadey_coinminer_darkgate_elex_glassworm_graphican_hijackloader_luca-stealer_medusalocker_njrat_remcos_revil
  • Size 4.5MB
  • Sample260703-b4fvlaex4p
  • SHA256 9c3aba4a5cfe60e39f4550447b4971001eb6985e582bb3fd57382c408dedb3e2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-07-02_1ac4717d1f525f94f941a086fdce0f89_amadey_coinminer_darkgate_elex_glassworm_graphican_hijackloader_luca-stealer_medusalocker_njrat_remcos_revil
    .exe 4.5MB

2026-07-02_1ac4717d1f525f94f941a086fdce0f89_amadey_coinminer_darkgate_elex_glassworm_graphican_hijackloader_luca-stealer_medusalocker_njrat_remcos_revil

  • IMPHASH c2fc08f539a5ea28b238f050ccb51cbe
  • SHA256 9c3aba4a5cfe60e39f4550447b4971001eb6985e582bb3fd57382c408dedb3e2
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
c6:5c:a3:4c:83:a3:86:6f:4c:6d:cd:43:1d:d4:fd:50:5b:10:ec:29:c6:de:45:73:49:b2:85:dd:67:87:d7:29
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=沧州句号网络科技有限公司,O=沧州句号网络科技有限公司,L=沧州市,ST=河北省,C=CN

PE Signature issue

Digest
e8:fc:f2:be:69:e2:f5:c8:ba:eb:eb:bc:f6:00:09:b2:a4:17:59:5a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=沧州句号网络科技有限公司,O=沧州句号网络科技有限公司,L=沧州市,ST=河北省,C=CN
Minor OS version
1
Major OS version
5
Entry point
89448
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths