2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil
Size 18.1MB
Sample260802-aecafaak3y
SHA256 b23bb4cc30ab6723abc31b410cd01d52ebbab30f0665b01286195e16eff0d9e5
MD5 a5c4179f02688068014e6356c639ee7e
SHA1 0fde9f1f6d9d4cd1cd2c415eb7d5ebee72b10917
SHA512 9531c2efb11e6cb7e9438b8f6def2d839ec3312614bc0b4b0dafb21b53b583f4eb75b8e2e3aca2ad3503bd2ec384a3ae90cf0b0fe4104a9be2a7d8516bfaab1e
SSDEEP 393216:kHR1hTSTG0J05lekUW3VP0m+DoOft5eYE2/a+8aLzov3qv0iq6JmYpleUBJ:kHRr2jJyDUWJuj1ffM3s0iqwmYpD
TLSH
T153171211BD824473E5630339569EB73E697EEA340B36D1D357C40A6D6C302E22B397AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil

File Explorer

2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil

.exe 18.1MB

2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil

SHA256 b23bb4cc30ab6723abc31b410cd01d52ebbab30f0665b01286195e16eff0d9e5
MD5 a5c4179f02688068014e6356c639ee7e
SHA1 0fde9f1f6d9d4cd1cd2c415eb7d5ebee72b10917
SHA512 9531c2efb11e6cb7e9438b8f6def2d839ec3312614bc0b4b0dafb21b53b583f4eb75b8e2e3aca2ad3503bd2ec384a3ae90cf0b0fe4104a9be2a7d8516bfaab1e
SSDEEP 393216:kHR1hTSTG0J05lekUW3VP0m+DoOft5eYE2/a+8aLzov3qv0iq6JmYpleUBJ:kHRr2jJyDUWJuj1ffM3s0iqwmYpD
TLSH
T153171211BD824473E5630339569EB73E697EEA340B36D1D357C40A6D6C302E22B397AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2052813

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

908KB

Virtual Size

907KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13.8MB

Virtual Size

13.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

207KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil

generic