General

  • Target
    2026-08-09_4ac2b81d2ad9b912b563e55558f3461f_coinminer_elex_floxif_glassworm_hijackloader_revil
  • Size 3.4MB
  • Sample260809-vd64mssbqb
  • SHA256 43b1e738a8373cfc104bf0f09304a01c56e67405ab253e052f3b7a382c65cee7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-09_4ac2b81d2ad9b912b563e55558f3461f_coinminer_elex_floxif_glassworm_hijackloader_revil
    .exe 3.4MB

2026-08-09_4ac2b81d2ad9b912b563e55558f3461f_coinminer_elex_floxif_glassworm_hijackloader_revil

  • IMPHASH a997524d9ef4d7c2dd2c4e244d6458a2
  • SHA256 43b1e738a8373cfc104bf0f09304a01c56e67405ab253e052f3b7a382c65cee7
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
ed:24:0d:f3:65:0e:80:6f:08:07:8f:c0:5e:05:c7:e8:cd:83:27:d5:f9:82:77:0a:91:06:a1:86:db:5c:8a:f6
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=101-81-47345,CN=MarkAny Inc.,O=MarkAny Inc.,L=Jung-gu,ST=Seoul,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

PE Signature issue

Digest
3f:7d:1c:8b:33:e2:70:48:be:a5:bd:75:71:f2:ce:81:b7:19:d3:a4
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=101-81-47345,CN=MarkAny Inc.,O=MarkAny Inc.,L=Jung-gu,ST=Seoul,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
5
Entry point
2239651
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\01.SVN\02.클라이언트\MaEPSBroker\00_SRC\MaEPSBroker_43(release)\XHRSample\bin\MaEPSBroker.pdb