General

  • Target
    2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
  • Size 4.5MB
  • Sample260808-ms2tgadq41
  • SHA256 06e8af56fb9b687a40304ff9919f21e198e1a367ddf80b9b65a1762fbdfdecc8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

File Explorer

  • 2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
    .exe 4.5MB

2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil

  • IMPHASH 5196551b3053e6e4e49e635db3484cb1
  • SHA256 06e8af56fb9b687a40304ff9919f21e198e1a367ddf80b9b65a1762fbdfdecc8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Embeds OpenSSL

    Embeds OpenSSL, may be used to circumvent TLS interception.

Digest
fb:e3:24:c4:2d:51:94:f6:1a:bb:a3:3a:e8:96:6d:34:11:a2:0f:c1:d9:16:22:b4:27:0b:5d:08:11:ee:ae:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91120102MAD221RD4U,CN=天津立方星球文化传媒有限公司,O=天津立方星球文化传媒有限公司,ST=天津市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b2b3e4b89ce58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e5a4a9e6b4a5e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
1179169
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\Jenkins\.jenkins\workspace\popularize_group\super_recycle_universal\super_recycle_universal\ReturnBinBuild\returnbin_service.pdb