General

  • Target
    2026-08-25_b4775b4ed77a21a7bfe84eb1be938ddb_amadey_coinminer_elex_emotet_glassworm_luca-stealer_magniber_njrat_plugx_rhadamanthys_zxxz
  • Size 115.2MB
  • Sample260826-pyf53ade55
  • SHA256 9e6d8c3935331492e1301bca01b66921c27d4538d4b79f2e887857c54c7f56e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • HeartCrypt Windows executable packer 1 IoCs

    HeartCrypt is a packer-as-a-service (PaaS) that injects malicious code into otherwise legitimate binaries

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-25_b4775b4ed77a21a7bfe84eb1be938ddb_amadey_coinminer_elex_emotet_glassworm_luca-stealer_magniber_njrat_plugx_rhadamanthys_zxxz
    .exe 115.2MB

2026-08-25_b4775b4ed77a21a7bfe84eb1be938ddb_amadey_coinminer_elex_emotet_glassworm_luca-stealer_magniber_njrat_plugx_rhadamanthys_zxxz

  • IMPHASH da05af7bf7cb1e65fbcef1c80c911607
  • SHA256 9e6d8c3935331492e1301bca01b66921c27d4538d4b79f2e887857c54c7f56e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • HeartCrypt Windows executable packer

    HeartCrypt is a packer-as-a-service (PaaS) that injects malicious code into otherwise legitimate binaries

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
52383232
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
electron.exe.pdb