2026-09-01_04fffdac4124c82d2c96298a6ef7178c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader

General

Target
2026-09-01_04fffdac4124c82d2c96298a6ef7178c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
Size 1.1MB
Sample260903-vjaydssaka
SHA256 6c04c222649701d5a87ea2874735e845e2c22c4ba3dbe76af5918df858190e09
MD5 04fffdac4124c82d2c96298a6ef7178c
SHA1 26029462ea3b2cbe9ddc7ac7d31840b230a6f1fc
SHA512 4580da1dfdcc122ed46815784a96b451a425095ebf577a837d99d87ef2e10023d00485f235eeb83d91a8b5bfa1179eba0a28bd2a002542738b9303f3d6b57893
SSDEEP 24576:17MRAEc1TLFqmBi+1sYI4DchekmEaKA5VO61jZbJey:pp5dQ6M4DeVmNO0jZcy
TLSH
T1CD357D1177929472E5B205318DBDEBA6563C7C240B308DDBB2D46E1E1C706C2AE35BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-01_04fffdac4124c82d2c96298a6ef7178c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-09-01_04fffdac4124c82d2c96298a6ef7178c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader

.exe 1.1MB

2026-09-01_04fffdac4124c82d2c96298a6ef7178c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader

IMPHASH f8a442a1ab66e500326d3015c7806ce1
SHA256 6c04c222649701d5a87ea2874735e845e2c22c4ba3dbe76af5918df858190e09
MD5 04fffdac4124c82d2c96298a6ef7178c
SHA1 26029462ea3b2cbe9ddc7ac7d31840b230a6f1fc
SHA512 4580da1dfdcc122ed46815784a96b451a425095ebf577a837d99d87ef2e10023d00485f235eeb83d91a8b5bfa1179eba0a28bd2a002542738b9303f3d6b57893
SSDEEP 24576:17MRAEc1TLFqmBi+1sYI4DchekmEaKA5VO61jZbJey:pp5dQ6M4DeVmNO0jZcy
TLSH
T1CD357D1177929472E5B205318DBDEBA6563C7C240B308DDBB2D46E1E1C706C2AE35BBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

592192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\FastCopy\Obj\Release\FastCopy.pdb

kernel32

CreateDirectoryW GetFullPathNameW GetFileAttributesW GetUserDefaultLCID DeleteFileW MoveFileExW CopyFileW MoveFileW ReadFile GetVolumeInformationW CancelIo TlsSetValue SetLastError EnterCriticalSection FindNextFileW WriteFile GetDiskFreeSpaceW SetFileTime SetThreadPriority LeaveCriticalSection InitializeCriticalSection FindClose WaitForSingleObject CreateFileW GetCurrentThreadId SuspendThread ResumeThread SetFileAttributesW Sleep GetFileInformationByHandle FormatMessageW LocalFileTimeToFileTime GetLastError FileTimeToSystemTime GetCurrentThread TerminateThread TlsAlloc CloseHandle GetLocalTime GetOverlappedResult DeleteCriticalSection SystemTimeToFileTime TlsGetValue SystemTimeToTzSpecificLocalTime TlsFree CreateEventA GetTickCount GetDriveTypeW SetFilePointer SetEndOfFile FlushFileBuffers GetFileSizeEx BackupRead BackupSeek GetFileTime BackupWrite CreateHardLinkW SetFilePointerEx SetFileValidData FindFirstFileW CreateMutexA ReleaseMutex GetFileSize GetSystemTimeAsFileTime SetDllDirectoryW SetPriorityClass GetCommandLineW SetSystemPowerState GetCurrentProcess GetThreadLocale CreatePipe DuplicateHandle OpenProcess ProcessIdToSessionId TzSpecificLocalTimeToSystemTime GetCurrentProcessId SetThreadExecutionState GetSystemTime GetLongPathNameW GetFileAttributesExW CreateProcessW GetStdHandle SetConsoleMode GetConsoleMode WriteConsoleW GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW GetModuleFileNameW GetProcAddress FreeLibrary UnmapViewOfFile OpenMutexA CreateFileMappingA MapViewOfFile DeviceIoControl RemoveDirectoryW FindFirstChangeNotificationW GetVolumeNameForVolumeMountPointW FindCloseChangeNotification FindNextChangeNotification HeapSize GetConsoleCP SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetCommandLineA GetEnvironmentVariableW GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA InterlockedExchange VirtualFree InterlockedCompareExchange VirtualAlloc SetEvent GetVersionExA GetModuleHandleW GetEnvironmentStringsW IsDebuggerPresent WriteConsoleA OutputDebugStringA AttachConsole OutputDebugStringW FreeConsole GetFileType InterlockedIncrement AllocConsole SetThreadLocale FindFirstFileExW TerminateProcess GetSystemDirectoryW CreateToolhelp32Snapshot GetExitCodeThread Process32NextW GlobalAlloc Process32FirstW GlobalFree LoadLibraryW GetWindowsDirectoryW GlobalLock MultiByteToWideChar WideCharToMultiByte CreateMutexW GlobalMemoryStatusEx ExitProcess GetModuleFileNameA RtlCaptureStackBackTrace GetModuleHandleExA RaiseException CreateThread IsBadReadPtr SetUnhandledExceptionFilter SizeofResource FindResourceA LockResource LoadResource GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW InitializeCriticalSectionAndSpinCount CreateEventW GetStringTypeW ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetACP HeapAlloc HeapFree IsValidLocale EnumSystemLocalesW HeapReAlloc

oleaut32

SafeArrayGetLBound VariantClear SafeArrayCreateVector SafeArrayPutElement SafeArrayGetUBound SafeArrayGetElement VariantInit SysFreeString SysAllocString

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Name

.text

Size

710KB

Virtual Size

709KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

182KB

Virtual Size

181KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

363KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

151KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-01_04fffdac4124c82d2c96298a6ef7178c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader

kernel32

oleaut32

version

generic