2026-08-01_4f52f78d06a1355011e6c98648f99833_akira_amadey_coinminer_darkgate_elex_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_4f52f78d06a1355011e6c98648f99833_akira_amadey_coinminer_darkgate_elex_glassworm
Size 28.2MB
Sample260801-bf8kpstyet
SHA256 ef7439ccc7388b5393cab96f6a9c3ea621c7c069496aac7b106267cb61ad1fd9
MD5 4f52f78d06a1355011e6c98648f99833
SHA1 13a0fa60d0fd01a0731c812230f4c3791c5272c6
SHA512 fdffe5bd1f50976603ef666307da477fae709c15cb38d29bb3b29b5b327ed81ba68e9ced75d99f4cf8b43a4fb83d7513f4210e134ddc1ae54b65d4e42a9903f8
SSDEEP 393216:bjrFOqEdvV71EGLdj6eJcuXupR+mm1qkRkNMDpn/5YNG2qfLWrd:bj5GEGZrypR+mm1qkRkGDp/5Yx/d
TLSH
T10757BF71760AC17BC54202B0A82DEF9B521C6E715F2425C3D2DC3E6D6EBA5E21B31E27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_4f52f78d06a1355011e6c98648f99833_akira_amadey_coinminer_darkgate_elex_glassworm

File Explorer

2026-08-01_4f52f78d06a1355011e6c98648f99833_akira_amadey_coinminer_darkgate_elex_glassworm

.exe 28.2MB

2026-08-01_4f52f78d06a1355011e6c98648f99833_akira_amadey_coinminer_darkgate_elex_glassworm

SHA256 ef7439ccc7388b5393cab96f6a9c3ea621c7c069496aac7b106267cb61ad1fd9
MD5 4f52f78d06a1355011e6c98648f99833
SHA1 13a0fa60d0fd01a0731c812230f4c3791c5272c6
SHA512 fdffe5bd1f50976603ef666307da477fae709c15cb38d29bb3b29b5b327ed81ba68e9ced75d99f4cf8b43a4fb83d7513f4210e134ddc1ae54b65d4e42a9903f8
SSDEEP 393216:bjrFOqEdvV71EGLdj6eJcuXupR+mm1qkRkNMDpn/5YNG2qfLWrd:bj5GEGZrypR+mm1qkRkGDp/5Yx/d
TLSH
T10757BF71760AC17BC54202B0A82DEF9B521C6E715F2425C3D2DC3E6D6EBA5E21B31E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10106145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

11.6MB

Virtual Size

11.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xdiff

Size

2.0MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

468KB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

158KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

883KB

Virtual Size

884KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.debug

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vm_sec

Size

8KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.winlice

Size

7.2MB

Virtual Size

7.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_MEM_READ

Name

.hercws

Size

25KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.diff

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=259, version=30151,

count=13, id=261, version=30151,

count=4, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=14, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=4, id=257, version=33519,

count=1, id=48, version=8943,

count=1, id=261, version=27412,

count=8, id=253, version=28518,

count=12, id=260, version=30034,

count=14, id=259, version=30034,

count=43, id=261, version=30034,

count=4, id=257, version=30034,

count=2, id=253, version=23601,

count=117, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=10, id=260, version=27412,

count=36, id=257, version=27412,

count=3, id=156, version=21202,

count=748, id=1, productName=Unmarked objects,

count=44, id=260, version=30153,

count=800, id=261, version=30153,

count=1, id=256, version=30153,

count=1, id=255, version=30153,

count=2, id=151,

count=1, id=258, version=30153,