General

  • Target
    2026-08-03_4809779dedc8bbcd6df6f19ba48e54a4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
  • Size 3.7MB
  • Sample260804-pb1k7awsdx
  • SHA256 8b208890bbbfe4b6e0de7576fe40c8adcab8fc04e552e4d1303673aba65ad13e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-03_4809779dedc8bbcd6df6f19ba48e54a4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
    .exe 3.7MB

2026-08-03_4809779dedc8bbcd6df6f19ba48e54a4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

  • IMPHASH 7e67e59fb3b833a525de9ba3e9fb7150
  • SHA256 8b208890bbbfe4b6e0de7576fe40c8adcab8fc04e552e4d1303673aba65ad13e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
27:79:14:2c:dd:48:cd:80:4a:be:19:5d:d4:a9:3c:dd:ee:a2:14:a0:b9:d0:a6:fb:47:5a:82:f3:b5:bf:13:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91320583MA1NRDQ75H,CN=昆山悦趣信息科技有限公司,O=昆山悦趣信息科技有限公司,STREET=昆山市花桥镇商务大道99号1号楼609室,L=苏州市,ST=江苏省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
76271
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\ProgramData\Jenkins\.jenkins\workspace\MGame\Cef\WebView\Release\CefView69.pdb