2026-08-16_59d8970f8a5037eab4cd05197484f76c_coinminer_elex_magniber

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_59d8970f8a5037eab4cd05197484f76c_coinminer_elex_magniber
Size 1.8MB
Sample260816-m16sdshq21
SHA256 2bb432773c156fd9a0c95d17e80305091693fffb296251d319b317bb93e24356
MD5 59d8970f8a5037eab4cd05197484f76c
SHA1 cb1614e667161c43ae000cd4c45fc549a21cfd60
SHA512 53247781ccf60a216800e5dd5baf99daaa7aef21c59d3bd6db81d3a8b2e021398a5d1b506c8d1f716ae2c1c0d039566230f38341a60de3e747bc96cd4021189a
SSDEEP 49152:9t5JunAuE9CD5yaOlllljC4gMwFf404/+NN:9t5knAuEodYUFfZNN
TLSH
T1689517036B419C2EEA6112394C6FFD3042986D7B4B21499B72C4FF183DF89F5792BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_59d8970f8a5037eab4cd05197484f76c_coinminer_elex_magniber

File Explorer

2026-08-16_59d8970f8a5037eab4cd05197484f76c_coinminer_elex_magniber

.exe 1.8MB

2026-08-16_59d8970f8a5037eab4cd05197484f76c_coinminer_elex_magniber

IMPHASH 5378f35af44271fd5631c7aa91978dc5
SHA256 2bb432773c156fd9a0c95d17e80305091693fffb296251d319b317bb93e24356
MD5 59d8970f8a5037eab4cd05197484f76c
SHA1 cb1614e667161c43ae000cd4c45fc549a21cfd60
SHA512 53247781ccf60a216800e5dd5baf99daaa7aef21c59d3bd6db81d3a8b2e021398a5d1b506c8d1f716ae2c1c0d039566230f38341a60de3e747bc96cd4021189a
SSDEEP 49152:9t5JunAuE9CD5yaOlllljC4gMwFf404/+NN:9t5knAuEodYUFfZNN
TLSH
T1689517036B419C2EEA6112394C6FFD3042986D7B4B21499B72C4FF183DF89F5792BA16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

385455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\redist\Language Independent\i386\ISP\setup.pdb

comctl32

ord17

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

lz32

LZClose LZOpenFileW LZCopy

msi

ord88 ord169 ord137 ord141 ord8 ord17 ord125 ord171

kernel32

VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile FindResourceExW FreeLibrary LoadLibraryExW lstrcmpiW lstrcpynW lstrcatW LoadLibraryW GetPrivateProfileIntW IsBadReadPtr CompareStringW CompareStringA GetSystemDefaultLangID GetUserDefaultLangID ExpandEnvironmentStringsW GetCurrentDirectoryW FileTimeToLocalFileTime GetFileTime SetFileAttributesW HeapAlloc HeapFree GetProcessHeap CopyFileW GetSystemInfo GetSystemTimeAsFileTime CreateEventW CreateMutexW ReleaseMutex DeleteCriticalSection InitializeCriticalSectionAndSpinCount QueryPerformanceFrequency SetErrorMode RaiseException WriteFile SetFilePointer GetFileSize GetFileAttributesW GetDriveTypeW GetDiskFreeSpaceW FindFirstFileW FindClose CreateDirectoryW VerLanguageNameW IsValidLocale FreeResource GetPrivateProfileSectionNamesA GetPrivateProfileStringA GetPrivateProfileIntA lstrcatA lstrcmpiA LoadResource FlushFileBuffers WriteConsoleW SetStdHandle OutputDebugStringW SetConsoleCtrlHandler SetFilePointerEx GetConsoleMode GetConsoleCP EnumSystemLocalesW GetUserDefaultLCID FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType HeapReAlloc GetStdHandle HeapSize AreFileApisANSI GetModuleHandleExW GetStringTypeW GetCurrentThreadId GetCPInfo GetOEMCP IsValidCodePage CreateSemaphoreW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter FatalAppExitA GetLocaleInfoW WideCharToMultiByte lstrcpyA GetTickCount ExitThread CreateThread GetExitCodeProcess ReadFile GetCommandLineW FormatMessageW LocalFree GetVersionExW GetWindowsDirectoryW InterlockedDecrement InterlockedIncrement GetTempPathW CreateFileW FindResourceW GlobalFree GlobalUnlock GlobalLock GlobalAlloc SizeofResource LockResource SetLastError GetLastError DuplicateHandle RemoveDirectoryW DeleteFileW SetCurrentDirectoryW lstrlenW lstrcpyW GetProcAddress GetModuleHandleW GetModuleFileNameW CreateProcessW Sleep CloseHandle GetACP IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind InterlockedExchange lstrcpynA LocalAlloc FindNextFileW WritePrivateProfileSectionW GetPrivateProfileSectionW lstrcmpW GetShortPathNameW GetCurrentThread QueryPerformanceCounter ReadConsoleW SearchPathW lstrcmpA SystemTimeToFileTime ResetEvent SetEvent VirtualProtect Process32NextW Process32FirstW CreateToolhelp32Snapshot GetDateFormatW GetTimeFormatW GetTempFileNameW GetEnvironmentVariableW CompareFileTime SetFileTime MultiByteToWideChar MoveFileExW WriteProcessMemory VirtualProtectEx GetSystemDirectoryW FlushInstructionCache SetThreadContext GetThreadContext ResumeThread TerminateProcess ExitProcess GetCurrentProcess MulDiv WaitForSingleObject OpenProcess GetProcessTimes lstrlenA GetLocalTime GetCurrentProcessId GetVersion LCMapStringW DecodePointer EncodePointer LeaveCriticalSection EnterCriticalSection

user32

SetActiveWindow SetDlgItemTextW GetDlgItem SetForegroundWindow DialogBoxIndirectParamW MoveWindow SendMessageW CharUpperBuffW SetWindowTextW GetWindowRect MessageBoxW GetWindowLongW SetWindowLongW LoadIconW TranslateMessage wsprintfW EndDialog WaitForInputIdle SystemParametersInfoW GetWindow FillRect GetSysColor MapWindowPoints RemovePropW GetPropW SetPropW EndPaint BeginPaint EnableMenuItem GetSystemMetrics SetFocus DefWindowProcW GetMessageW LoadStringW LoadImageW ReleaseDC GetDC CreateDialogParamW GetParent GetWindowTextW CharNextW GetDesktopWindow GetClientRect IsWindowEnabled CreateDialogIndirectParamW DispatchMessageW IsDialogMessageW FindWindowExW ScreenToClient EnableWindow MsgWaitForMultipleObjects SendDlgItemMessageW SetWindowPos ShowWindow DestroyWindow IsWindow ExitWindowsEx CharUpperW wsprintfA CallWindowProcW CreateWindowExW DrawIcon DrawTextW UpdateWindow GetWindowDC InvalidateRect DrawFocusRect CopyRect InflateRect EnumChildWindows GetClassNameW MapDialogRect RegisterClassExW GetDlgItemTextW IntersectRect MonitorFromPoint PostMessageW PeekMessageW IsWindowVisible

gdi32

SetPixel TextOutW SetTextColor SetBkMode SetBkColor SaveDC RestoreDC CreateSolidBrush UnrealizeObject CreateHalftonePalette GetDIBColorTable SelectPalette SelectObject RealizePalette GetSystemPaletteEntries GetDeviceCaps DeleteDC CreatePalette CreateCompatibleDC BitBlt GetObjectW TranslateCharsetInfo DeleteObject CreateFontIndirectW CreateCompatibleBitmap CreateDCW CreatePatternBrush GetStockObject GetTextExtentPoint32W DeleteMetaFile CreateDIBitmap CreateBitmap CreateRectRgn PatBlt PlayMetaFile SelectClipRgn SetMapMode SetMetaFileBitsEx StretchBlt SetStretchBltMode SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx

advapi32

RegQueryValueExW RegCreateKeyExW CryptVerifySignatureW CryptSignHashW CryptHashData CryptCreateHash CryptAcquireContextW FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenThreadToken RegEnumKeyW RegCreateKeyW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegOpenKeyW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExW RegCloseKey

shell32

SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW

ole32

StringFromGUID2 CoCreateGuid CoLoadLibrary CreateItemMoniker GetRunningObjectTable CoUninitialize CoInitializeEx ProgIDFromCLSID CreateStreamOnHGlobal CoInitializeSecurity CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree

oleaut32

VariantInit LoadTypeLi RegisterTypeLi SetErrorInfo CreateErrorInfo VarBstrCmp SysAllocString SysFreeString SysStringLen SysAllocStringLen SysReAllocStringLen GetErrorInfo SysStringByteLen SysAllocStringByteLen VariantChangeType VariantClear VarUI4FromStr VarBstrCat

crypt32

CertOpenSystemStoreW CryptAcquireCertificatePrivateKey CryptImportPublicKeyInfo CertCompareCertificate CertAddCertificateContextToStore CertGetCertificateContextProperty CertSetCertificateContextProperty CertGetIssuerCertificateFromStore CertFindCertificateInStore CertEnumCertificatesInStore CertSaveStore CertOpenStore PFXImportCertStore

rpcrt4

UuidCreate UuidToStringW UuidFromStringW RpcStringFreeW

gdiplus

GdipGetImageWidth GdipGetImageHeight GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDrawImageRectI GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdipCreateBitmapFromResource GdipCreateBitmapFromFileICM GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipDisposeImage

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_59d8970f8a5037eab4cd05197484f76c_coinminer_elex_magniber

comctl32

version

lz32

msi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

crypt32

rpcrt4

gdiplus

generic