General

  • Target
    2026-10-01_32713c3f768726631c268924d954f0e3_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil
  • Size 5.7MB
  • Sample261002-vmx74ass8j
  • SHA256 a1f56940827eeb21edd8f99ee3e5ee5011ba6317fd21ba0d35ff88a77a732274
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-10-01_32713c3f768726631c268924d954f0e3_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil
    .exe 5.7MB

2026-10-01_32713c3f768726631c268924d954f0e3_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil

  • IMPHASH 3f58f94b72d824ab404d77c0109d6f8b
  • SHA256 a1f56940827eeb21edd8f99ee3e5ee5011ba6317fd21ba0d35ff88a77a732274
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3c:68:27:a0:84:ba:dc:eb:f8:db:72:e9:00:38:6e:b3:6d:cc:15:d8:4e:53:e9:5a:c1:3e:47:36:2f:ea:93:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91440400MA7FWRMCXK,CN=珠海市莫停之科技有限公司,O=珠海市莫停之科技有限公司,L=珠海市,ST=广东省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e78fa0e6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b9bfe4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
2678518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\jekins_work\workspace\sysoptasst_build_2022\product\win32\dbginfo\sysslim.pdb