General

  • Target
    2026-07-12_64aaad292920a7246f3e8373ca634b5a_amadey_coinminer_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil
  • Size 3.0MB
  • Sample260712-vjaydsfy3t
  • SHA256 4a2b8b1a93c3abebb5556e12c828410751696990e07788bd4aabcc6064b123fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-12_64aaad292920a7246f3e8373ca634b5a_amadey_coinminer_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil
    .exe 3.0MB

2026-07-12_64aaad292920a7246f3e8373ca634b5a_amadey_coinminer_elex_floxif_glassworm_luca-stealer_lynx_njrat_revil

  • IMPHASH 880db6f0d18830f9b8984f475a642a5a
  • SHA256 4a2b8b1a93c3abebb5556e12c828410751696990e07788bd4aabcc6064b123fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
33:e6:0b:4d:65:aa:12:b6:2e:25:ff:98:fc:58:74:f9:62:16:73:a0:5d:62:d3:d7:13:4f:8a:c7:3b:bc:fa:15
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Datacollect Limited,O=Datacollect Limited,ST=Herefordshire,C=GB
Chains

Jan 1, 0001

PE Signature issue

Digest
e8:07:5b:38:9f:7f:ee:74:7a:0e:c5:ff:d3:78:84:62:0c:57:54:15
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Datacollect Limited,O=Datacollect Limited,ST=Herefordshire,C=GB
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
6
Entry point
2115871
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths