2026-08-08_12a77c31a7e591a7b162bfc56c96dd52_coinminer_elex_hive

General

Target
2026-08-08_12a77c31a7e591a7b162bfc56c96dd52_coinminer_elex_hive
Size 2.4MB
Sample260808-frj4pstygz
SHA256 0c58382b7abaa77a64e208f4847336ebefa131f619c65bd5d1062d45f0825029
MD5 12a77c31a7e591a7b162bfc56c96dd52
SHA1 8119d7cb6db41f6c112c497be8e8bd6655c387e0
SHA512 6e3b30fb288608d29ce82ef5571831fcc314ce003087380934cefca9f2a3d256adcd6c978903f235546587f41c9034feec85bccadc95463fd3fe905a31f559f4
SSDEEP 24576:nLmSx6VcyeBialCK+NNv4NNKgLOCRvYl9DgMlWq4e8iyZTtnRLlS0moqMed5fFuK:nL1oNyFFAuf6wFgY2D9Nx
TLSH
T107C52941FD8795F2E80715714497A26F27219D095F3ACB8BFB84BA7EF9332D20836249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_12a77c31a7e591a7b162bfc56c96dd52_coinminer_elex_hive

SHA256 0c58382b7abaa77a64e208f4847336ebefa131f619c65bd5d1062d45f0825029
MD5 12a77c31a7e591a7b162bfc56c96dd52
SHA1 8119d7cb6db41f6c112c497be8e8bd6655c387e0
SHA512 6e3b30fb288608d29ce82ef5571831fcc314ce003087380934cefca9f2a3d256adcd6c978903f235546587f41c9034feec85bccadc95463fd3fe905a31f559f4
SSDEEP 24576:nLmSx6VcyeBialCK+NNv4NNKgLOCRvYl9DgMlWq4e8iyZTtnRLlS0moqMed5fFuK:nL1oNyFFAuf6wFgY2D9Nx
TLSH
T107C52941FD8795F2E80715714497A26F27219D095F3ACB8BFB84BA7EF9332D20836249
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

422816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths