General

  • Target
    2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_remcos_rhadamanthys_smoke-loader_stealc_stop
  • Size 24.5MB
  • Sample260805-1ect3sgm7s
  • SHA256 8708c50e3260dc4a0e6c96c3c69506009ddf1c79a7415c1bfdf67cd1c88b45cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing base64 encoded User Agent 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs

File Explorer

  • 2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_remcos_rhadamanthys_smoke-loader_stealc_stop
    .exe 24.5MB

2026-08-05_2b22462999ed4817c6f916a3ee7b4d77_amadey_coinminer_elex_glassworm_hijackloader_magicrat_remcos_rhadamanthys_smoke-loader_stealc_stop

  • IMPHASH 844541caf12708e4e764a313f6de6ef6
  • SHA256 8708c50e3260dc4a0e6c96c3c69506009ddf1c79a7415c1bfdf67cd1c88b45cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing base64 encoded User Agent

  • UPX dump on OEP (original entry point)

Digest
4a:6f:38:42:90:aa:cc:18:e1:1c:e6:ec:01:57:86:13:5c:e4:94:cc:0a:69:f0:3c:c2:cc:51:2e:ed:51:4e:fd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Leonid Kokarev,O=Leonid Kokarev,ST=Murmanskaja oblast,C=RU
Digest
44:83:96:82:7b:d4:8c:4d:19:ae:75:ec:ec:e3:76:a3:1d:ef:c1:af
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Leonid Kokarev,O=Leonid Kokarev,ST=Murmanskaja oblast,C=RU
Minor OS version
0
Major OS version
4
Entry point
5248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths