General

  • Target
    2026-07-03_8f5725e5a6b886d07a50e1cb01efbbb5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
  • Size 4.8MB
  • Sample260703-rc9llaav81
  • SHA256 c4cc8c7225b7e320963e77706eb34e5c234b3c81f78e9c9bb2cdb51e98be803b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

File Explorer

  • 2026-07-03_8f5725e5a6b886d07a50e1cb01efbbb5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
    .exe 4.8MB

2026-07-03_8f5725e5a6b886d07a50e1cb01efbbb5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil

  • IMPHASH 148d863fceeefbf5f0ad492c612a64f5
  • SHA256 c4cc8c7225b7e320963e77706eb34e5c234b3c81f78e9c9bb2cdb51e98be803b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Embeds OpenSSL

    Embeds OpenSSL, may be used to circumvent TLS interception.

Digest
1c:21:43:b5:91:38:0f:7f:4c:3e:e8:d3:a5:3e:ad:04:cd:02:05:d2:de:df:7c:f5:eb:52:f8:b2:eb:c9:91:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=天津邦兴利达科技有限公司,O=天津邦兴利达科技有限公司,ST=天津市,C=CN
Minor OS version
0
Major OS version
6
Entry point
1198433
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\Jenkins\.jenkins\workspace\popularize_group\super_recycle_universal\super_recycle_universal\RecoverBinBuild\recoverbin_service.pdb