2026-07-30_3e5aa3abbfef94cebb67899d0a121648_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

General

Target
2026-07-30_3e5aa3abbfef94cebb67899d0a121648_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
Size 27.8MB
Sample260730-x8fahsfl3z
SHA256 fa0c55ec9900bf7f7eb1652a5140dc0b963e617af2a7acf37d5a9269c13dfa7b
MD5 3e5aa3abbfef94cebb67899d0a121648
SHA1 df4a3b22878f58f323070d6df022a8d40c3a9290
SHA512 32299a86e839464a6438f16a074eac0df474f51614904fdc9da6d4dd2e2d60efd0d34f8b255016992a64b31e83d22dfdeafe417ea2d9c80cb633d9007566d824
SSDEEP 196608:E3rA16qSepSF38LBqxLceuOriT1wbLFoA+iKsUZfXqjZln8sbb2un8snwC:E5qLpSV4OiJi/ssUZvq/8sV8s
TLSH
T14857CF23F2A2C13DC059D13990AB5BB3F63634A60739C6FB77C056A85B716C09A3B356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_3e5aa3abbfef94cebb67899d0a121648_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

File Explorer

2026-07-30_3e5aa3abbfef94cebb67899d0a121648_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

.exe 27.8MB

2026-07-30_3e5aa3abbfef94cebb67899d0a121648_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

SHA256 fa0c55ec9900bf7f7eb1652a5140dc0b963e617af2a7acf37d5a9269c13dfa7b
MD5 3e5aa3abbfef94cebb67899d0a121648
SHA1 df4a3b22878f58f323070d6df022a8d40c3a9290
SHA512 32299a86e839464a6438f16a074eac0df474f51614904fdc9da6d4dd2e2d60efd0d34f8b255016992a64b31e83d22dfdeafe417ea2d9c80cb633d9007566d824
SSDEEP 196608:E3rA16qSepSF38LBqxLceuOriT1wbLFoA+iKsUZfXqjZln8sbb2un8snwC:E5qLpSV4OiJi/ssUZvq/8sV8s
TLSH
T14857CF23F2A2C13DC059D13990AB5BB3F63634A60739C6FB77C056A85B716C09A3B356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1143464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=49, id=14, version=7299,

count=14, id=12, version=7291,

count=44, id=19, version=8022,

count=1, id=28, version=9178,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=1, id=11, version=8966,

count=84, id=10, version=8966,

count=24, id=19, version=8034,

count=710, id=1, productName=Unmarked objects,

count=3, id=93, version=2179,

count=7, id=18, version=8444,

count=112, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=247, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=119, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=27, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=55, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_3e5aa3abbfef94cebb67899d0a121648_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar

generic