General

  • Target
    2026-08-30_433c15e6b9f7845878055207770f3474_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
  • Size 4.5MB
  • Sample260831-pd4evstxft
  • SHA256 a4004348ba9a1f51e8a81d18472d79cb548176cd0550b5c69550914f8f6df4ac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

File Explorer

  • 2026-08-30_433c15e6b9f7845878055207770f3474_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
    .exe 4.5MB

2026-08-30_433c15e6b9f7845878055207770f3474_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil

  • IMPHASH a1260ce1075de1b66fe33092b702f060
  • SHA256 a4004348ba9a1f51e8a81d18472d79cb548176cd0550b5c69550914f8f6df4ac
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Embeds OpenSSL

    Embeds OpenSSL, may be used to circumvent TLS interception.

Digest
2c:c5:aa:db:91:10:2b:67:b8:03:dd:5b:8b:64:1e:4b:3f:08:c2:b7:88:91:0d:70:d1:94:fd:14:b8:53:32:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91120104MAD2WA688E,CN=天津星聚时代科技有限公司,O=天津星聚时代科技有限公司,ST=天津市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e58d97e5bc80e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e5a4a9e6b4a5e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
1152497
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\Jenkins\.jenkins\workspace\clean_master\old_extern_project\super_recycle_universal\super_recycle_universal\TrashRecoverBuild\trashrecover_service.pdb