2026-08-24_ba8914da7b1eea36904ff43cd0172272_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_ba8914da7b1eea36904ff43cd0172272_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
Size 13.1MB
Sample260825-c9rdysfg34
SHA256 6c33f6dba80db940601a9c200bba6145a81320d13ea655728889812e1965842a
MD5 ba8914da7b1eea36904ff43cd0172272
SHA1 6c19cc1b00c11393bf332bfd4960bd4b84530f6f
SHA512 1c856f5c1292aeca5f478f51fcd4928364efa1602c1ac4524005dcb6a2dcc1e0b56a7c60db49e288d1fa1a591a1721385ed267a415e6f9d99943dbfec92d4b97
SSDEEP 196608:BwgQhbKQP9jBYlxDaZ39G/oY3ksnAJsv6tWKFdu9CLg0:BHOTYlAtUgY1AJsv6tWKFdu9Cs0
TLSH
T166D69ED3E28381B2F5D1107604AAE73B4731BE150B1596D7F3D83A1A99317E27E3B18A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_ba8914da7b1eea36904ff43cd0172272_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil

File Explorer

2026-08-24_ba8914da7b1eea36904ff43cd0172272_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil

.exe 13.1MB

2026-08-24_ba8914da7b1eea36904ff43cd0172272_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil

SHA256 6c33f6dba80db940601a9c200bba6145a81320d13ea655728889812e1965842a
MD5 ba8914da7b1eea36904ff43cd0172272
SHA1 6c19cc1b00c11393bf332bfd4960bd4b84530f6f
SHA512 1c856f5c1292aeca5f478f51fcd4928364efa1602c1ac4524005dcb6a2dcc1e0b56a7c60db49e288d1fa1a591a1721385ed267a415e6f9d99943dbfec92d4b97
SSDEEP 196608:BwgQhbKQP9jBYlxDaZ39G/oY3ksnAJsv6tWKFdu9CLg0:BHOTYlAtUgY1AJsv6tWKFdu9Cs0
TLSH
T166D69ED3E28381B2F5D1107604AAE73B4731BE150B1596D7F3D83A1A99317E27E3B18A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7849531

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

8.9MB

Virtual Size

8.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

113KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.qtmetad

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

13B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1024B

Virtual Size

560B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

323KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_ba8914da7b1eea36904ff43cd0172272_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil

generic