General

  • Target
    2026-08-21_49d7bba58f8d981a6ed00d85da8aba03_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_remcos_revil_virut
  • Size 4.8MB
  • Sample260821-e88mysgn3w
  • SHA256 83e6aa1fe0b664b45a2df2c58797003d8ec097800a7345eb980cabdc40c2047d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-21_49d7bba58f8d981a6ed00d85da8aba03_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_remcos_revil_virut
    .exe 4.8MB

2026-08-21_49d7bba58f8d981a6ed00d85da8aba03_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_remcos_revil_virut

  • IMPHASH bf4e037edb428df51ce5edb7d478ae27
  • SHA256 83e6aa1fe0b664b45a2df2c58797003d8ec097800a7345eb980cabdc40c2047d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
9e:1f:8f:19:96:c1:e7:b3:f6:99:c9:54:eb:cb:76:b0:c8:2e:72:cd:11:91:d4:7d:f5:90:4b:fe:a5:07:d5:60
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN
Minor OS version
0
Major OS version
6
Entry point
5055614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\landun\workspace\p-ad0484fbdfe349d18f6d70b4084a70ba\src\product\win32\dbginfo\pdfsdk.pdb