General

  • Target
    2026-09-24_834d85be8bbda09a5f2c8e3d4d4bb5e9_coinminer_darkgate_elex_glassworm_hijackloader
  • Size 20.5MB
  • Sample260925-gql3ca1drg
  • SHA256 b12eed023158c09c4f2adce4e59c1f6c29664c4106fd0d8cf2e46ccc622f759f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-09-24_834d85be8bbda09a5f2c8e3d4d4bb5e9_coinminer_darkgate_elex_glassworm_hijackloader
    .exe 20.5MB

2026-09-24_834d85be8bbda09a5f2c8e3d4d4bb5e9_coinminer_darkgate_elex_glassworm_hijackloader

  • IMPHASH 8199d951a83cae48e01c283f296aabe3
  • SHA256 b12eed023158c09c4f2adce4e59c1f6c29664c4106fd0d8cf2e46ccc622f759f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
af:dd:3d:1a:2b:f3:a3:cd:ef:48:34:9d:24:cf:db:d5:e8:b2:c5:a2:e7:06:f8:7e:3e:c1:39:ea:b6:d1:c5:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5036628,CN=MyHeritage (USA) Inc.,OU=MyHeritage (USA) Inc.,O=MyHeritage (USA) Inc.,L=Lehi,ST=Utah,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
13428140
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\jenkins\workspace\FTB\FTB_Build_v8\FTB\FTBPublish\Release\FamilyTreePublisher.pdb