2026-09-16_3a3aebe6bb679b86c2dbae7e861686fc_amadey_coinminer_elex_glassworm_luca-stealer_memery_njrat_remcos_smoke-loader

General

Target
2026-09-16_3a3aebe6bb679b86c2dbae7e861686fc_amadey_coinminer_elex_glassworm_luca-stealer_memery_njrat_remcos_smoke-loader
Size 16.4MB
Sample260916-2e3k6sfa82
SHA256 1e462621361e88d53f9935b6e35a410d3730269e3977c321183473cb3f5cc126
MD5 3a3aebe6bb679b86c2dbae7e861686fc
SHA1 a80dd7f4992849ea95b37628d59e7fcb569f9040
SHA512 0372114fa1ab2acaec20eca870f15f49762f2efb8e3059c33d838b57705df4a15dc0e8f8b67aab88ffc1a220df773b7d579763295fc0cade4622768c05565262
SSDEEP 196608:/aH64eGZF6bUpMBF1p/kjRm4OWi2b/eGZF6bUpMBF1p/kjRm4OWi2b:/6IbUwF1VERmj2bXIbUwF1VERmj2b
TLSH
T11107020177D14128FDF706B689FE616C557DB9A10B28D0CB62C826EE5B22BE0BD32753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_3a3aebe6bb679b86c2dbae7e861686fc_amadey_coinminer_elex_glassworm_luca-stealer_memery_njrat_remcos_smoke-loader

2026-09-16_3a3aebe6bb679b86c2dbae7e861686fc_amadey_coinminer_elex_glassworm_luca-stealer_memery_njrat_remcos_smoke-loader

.exe 16.4MB
downloader_req.pyc

574B

SHA256 1e462621361e88d53f9935b6e35a410d3730269e3977c321183473cb3f5cc126
MD5 3a3aebe6bb679b86c2dbae7e861686fc
SHA1 a80dd7f4992849ea95b37628d59e7fcb569f9040
SHA512 0372114fa1ab2acaec20eca870f15f49762f2efb8e3059c33d838b57705df4a15dc0e8f8b67aab88ffc1a220df773b7d579763295fc0cade4622768c05565262
SSDEEP 196608:/aH64eGZF6bUpMBF1p/kjRm4OWi2b/eGZF6bUpMBF1p/kjRm4OWi2b:/6IbUwF1VERmj2bXIbUwF1VERmj2b
TLSH
T11107020177D14128FDF706B689FE616C557DB9A10B28D0CB62C826EE5B22BE0BD32753
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths