2026-08-04_0f72d2d8574089f463464cc81b3ee30d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_wannacry

General

Target
2026-08-04_0f72d2d8574089f463464cc81b3ee30d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_wannacry
Size 48.8MB
Sample260804-3dqqnashrd
SHA256 e617a4393f1cf326c5469c9b527097cdce1a7c5bf3691823d4ef056d35985de5
MD5 0f72d2d8574089f463464cc81b3ee30d
SHA1 de18ecdd1f2506d85965c8f33ef1003e4f32f2a2
SHA512 8d33795f92d4803dbd09890a38cd90c0ae45e4042283d2c744aa03d7ab629ccab6c7f55cec92fd3f9b002841dd38dc51980236191af35a0e9bf27746adf47f5d
SSDEEP 1572864:z/s5cfVX+VR1ciMZ68NNOR456/VZDjA2xzts:zQ6VUR1q68NNU4Er42rs
TLSH
T146B73315BFB6C474D366093968A9AF3838D96F1B1D3198A7F3D04B190C30AE2F935A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_0f72d2d8574089f463464cc81b3ee30d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_wannacry

2026-08-04_0f72d2d8574089f463464cc81b3ee30d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_wannacry

.exe 48.8MB

SHA256 e617a4393f1cf326c5469c9b527097cdce1a7c5bf3691823d4ef056d35985de5
MD5 0f72d2d8574089f463464cc81b3ee30d
SHA1 de18ecdd1f2506d85965c8f33ef1003e4f32f2a2
SHA512 8d33795f92d4803dbd09890a38cd90c0ae45e4042283d2c744aa03d7ab629ccab6c7f55cec92fd3f9b002841dd38dc51980236191af35a0e9bf27746adf47f5d
SSDEEP 1572864:z/s5cfVX+VR1ciMZ68NNOR456/VZDjA2xzts:zQ6VUR1q68NNU4Er42rs
TLSH
T146B73315BFB6C474D366093968A9AF3838D96F1B1D3198A7F3D04B190C30AE2F935A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

626256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths