General

  • Target
    2026-08-09_443ad32ff73f64a0421ca0776ead7c66_coinminer_darkgate_elex_glassworm_mespinoza_mimic_poet-rat
  • Size 14.7MB
  • Sample260809-ptzfvaer7x
  • SHA256 d753f522694bff243fc8c0baf2782f1361ae17fe9405d70ce7fe3e80b72d87fa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-09_443ad32ff73f64a0421ca0776ead7c66_coinminer_darkgate_elex_glassworm_mespinoza_mimic_poet-rat
    .exe 14.7MB

2026-08-09_443ad32ff73f64a0421ca0776ead7c66_coinminer_darkgate_elex_glassworm_mespinoza_mimic_poet-rat

  • IMPHASH 022317fcf49fc4778a883ad7aac5ed93
  • SHA256 d753f522694bff243fc8c0baf2782f1361ae17fe9405d70ce7fe3e80b72d87fa
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
1f:8a:5f:a9:14:e4:dd:f4:f3:9a:4f:ef:84:a6:46:bc:24:4a:50:3c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=913101045947355133,CN=上海巨人统平网络科技有限公司,O=上海巨人统平网络科技有限公司,L=上海,ST=上海,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

PE Signature issue

Digest
1d:be:90:66:cd:fe:4c:cc:24:4c:ba:28:f8:65:38:f9:fa:d0:ac:38:d2:4d:a1:8c:21:bd:60:c9:5c:aa:38:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=913101045947355133,CN=上海巨人统平网络科技有限公司,O=上海巨人统平网络科技有限公司,L=上海,ST=上海,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
6269923
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\client\branche_20241125hunfu\branches\branche_seal\frameworks\runtime-src\proj.win32\Publish.win32\sealapp.pdb