General

  • Target
    2026-07-10_ecef6e97eb79cab5feff1634fe145274_acrstealer_amadey_coinminer_darkgate_datper_elex_gcleaner_glassworm_luca-stealer_njrat_sliver_smoke-loader_stop
  • Size 20.5MB
  • Sample260710-eys5hscz2m
  • SHA256 1cdb098026a271016ae5d9e3b2a3e0a2edd838669503967f18c927e7447369cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • 2026-07-10_ecef6e97eb79cab5feff1634fe145274_acrstealer_amadey_coinminer_darkgate_datper_elex_gcleaner_glassworm_luca-stealer_njrat_sliver_smoke-loader_stop
    .exe 20.5MB

2026-07-10_ecef6e97eb79cab5feff1634fe145274_acrstealer_amadey_coinminer_darkgate_datper_elex_gcleaner_glassworm_luca-stealer_njrat_sliver_smoke-loader_stop

  • IMPHASH 63820465042b744c928c22327e3bfaf5
  • SHA256 1cdb098026a271016ae5d9e3b2a3e0a2edd838669503967f18c927e7447369cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing artifacts associated with disabling Widnows Defender

  • Unsigned PE

    Checks for missing Authenticode signature.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

Minor OS version
0
Major OS version
5
Entry point
2760100
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths