2026-10-12_b28f42a29b2c15541c8b768ab8f376d0_amadey_coinminer_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-12_b28f42a29b2c15541c8b768ab8f376d0_amadey_coinminer_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos
Size 2.9MB
Sample261013-2lnets113p
SHA256 52bcc36743aa0d736f4ee255dcc5dccfda4ad641401fc79cb77644fa73dbc04d
MD5 b28f42a29b2c15541c8b768ab8f376d0
SHA1 282a8035e6cbe10d2a7af390d5d4271693ad2457
SHA512 6b2e0237ae62d9e06d53e6bad8996e9173a4d8d0a51da07acff3276186670e39b11f1f1d04294969d4671e336b6cc985d23cd8bfaa0db2006a5327bd6a7a105f
SSDEEP 49152:RUEfBajM+v7V4jWHIh/QTC4fQennsCzKJ6EmrelaB0zj0yjoB2SQlWsuSeluWKUN:zfB5+SWHIlessB2YyjlSYfuSelu/YU
TLSH
T185D5DF217547C23BD56601B04B2CDEAB905C7D345FA548C7B3C41F2A69B0AD3AA32F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-12_b28f42a29b2c15541c8b768ab8f376d0_amadey_coinminer_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos

File Explorer

2026-10-12_b28f42a29b2c15541c8b768ab8f376d0_amadey_coinminer_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos

.exe 2.9MB

2026-10-12_b28f42a29b2c15541c8b768ab8f376d0_amadey_coinminer_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos

IMPHASH 4785dfaf5b57046a762176f069364f3a
SHA256 52bcc36743aa0d736f4ee255dcc5dccfda4ad641401fc79cb77644fa73dbc04d
MD5 b28f42a29b2c15541c8b768ab8f376d0
SHA1 282a8035e6cbe10d2a7af390d5d4271693ad2457
SHA512 6b2e0237ae62d9e06d53e6bad8996e9173a4d8d0a51da07acff3276186670e39b11f1f1d04294969d4671e336b6cc985d23cd8bfaa0db2006a5327bd6a7a105f
SSDEEP 49152:RUEfBajM+v7V4jWHIh/QTC4fQennsCzKJ6EmrelaB0zj0yjoB2SQlWsuSeluWKUN:zfB5+SWHIlessB2YyjlSYfuSelu/YU
TLSH
T185D5DF217547C23BD56601B04B2CDEAB905C7D345FA548C7B3C41F2A69B0AD3AA32F6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

830851

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\pdfconverter\bin\Win32\release_static\pdb\2345PdfFeedback.pdb

imm32

ImmAssociateContext

kernel32

GetFileTime TryEnterCriticalSection InitializeCriticalSection GetACP WideCharToMultiByte CreateDirectoryW GetFullPathNameW GetTempPathW SetFileAttributesW DeleteFileW GetCurrentDirectoryW GetWindowsDirectoryW FindNextFileW FindClose WaitForMultipleObjects WaitForSingleObject GetCurrentProcessId CreateProcessW GetExitCodeProcess HeapFree OpenProcess GlobalAlloc GlobalFree HeapAlloc GetProcessHeap QueryDosDeviceW GetCurrentProcess GetVolumeInformationW GetDiskFreeSpaceW GetLogicalDriveStringsW GetLocalTime GetStdHandle ReleaseSemaphore Sleep GetSystemTimeAsFileTime GlobalMemoryStatusEx GetPrivateProfileStringW FileTimeToSystemTime CloseHandle SetEndOfFile SetFilePointer SetFileTime WriteFile ReadFile GetSystemInfo InterlockedExchangeAdd LockResource LoadLibraryA GetEnvironmentVariableW MapViewOfFile CreateFileMappingW UnmapViewOfFile OpenFileMappingW OpenMutexW ReleaseMutex CreateMutexW WriteConsoleW SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetConsoleCP FlushFileBuffers GetTimeZoneInformation GetConsoleMode SetFilePointerEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapReAlloc HeapSize GetFileType ExitProcess GetModuleHandleExW ResumeThread ExitThread RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList VirtualProtect GetModuleHandleA FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority CreateThread SignalObjectAndWait CreateTimerQueue GetStartupInfoW lstrcpyW lstrcatW GetFileAttributesW ExpandEnvironmentStringsW lstrlenW SearchPathW GetFileAttributesExW CreateFileW FindFirstFileW MulDiv LoadLibraryW GlobalUnlock GlobalLock GetVersionExW SetUnhandledExceptionFilter LoadLibraryExW GetTickCount lstrcmpiW InterlockedIncrement FreeLibrary GetModuleHandleW DeleteCriticalSection LocalFree GetProcAddress DecodePointer FindResourceW LoadResource RaiseException GetLastError MultiByteToWideChar GetCurrentThreadId SetErrorMode LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW InterlockedDecrement GetLongPathNameW GetCommandLineW EnterCriticalSection TerminateProcess UnhandledExceptionFilter ResetEvent DeviceIoControl SetEvent OutputDebugStringW IsDebuggerPresent LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead SetLastError InterlockedExchange SizeofResource GetFileSize GetFileSizeEx GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW EncodePointer TlsFree TlsSetValue TlsGetValue TlsAlloc CreateEventW GetStringTypeW FormatMessageW GetExitCodeThread GetCurrentThread SwitchToThread WaitForSingleObjectEx DuplicateHandle QueryPerformanceFrequency QueryPerformanceCounter

user32

RegisterClassExW UnregisterClassW CreateWindowExW DestroyWindow DefWindowProcW GetLastActivePopup GetWindowThreadProcessId PeekMessageW GetForegroundWindow DispatchMessageW GetMessageW EndPaint BeginPaint IsIconic InvalidateRect PtInRect DialogBoxParamW GetParent PostQuitMessage AppendMenuW GetDlgItem GetClientRect RemoveMenu TrackPopupMenuEx LoadIconW TranslateAcceleratorW SetFocus CharNextW TranslateMessage IsWindow AttachThreadInput LoadCursorW SetWindowLongW GetDesktopWindow DestroyMenu MapWindowPoints GetMonitorInfoW ShowWindow GetActiveWindow LoadStringW SystemParametersInfoW GetClassInfoExW SetForegroundWindow CreatePopupMenu DrawTextW UnionRect SetCursor SetRectEmpty RedrawWindow TrackMouseEvent SetCapture ReleaseCapture SetRect SetClipboardData wsprintfW IsWindowVisible IsWindowEnabled IsRectEmpty GetWindow MonitorFromWindow EndDialog MoveWindow OpenClipboard CloseClipboard GetClipboardData GetWindowTextW GetDC OffsetRect ReleaseDC CopyRect GetWindowLongW GetMenuItemInfoW CallWindowProcW PostMessageW MonitorFromPoint GetWindowRect SetWindowPos GetMenuItemCount LoadStringA ScreenToClient SendMessageW SetWindowTextW MessageBeep

gdi32

GetDeviceCaps CreateDIBSection GetTextColor SetGraphicsMode SelectClipRgn SetArcDirection SetStretchBltMode SetBrushOrgEx SetDCPenColor SetWorldTransform CreateFontIndirectW GetStockObject SetTextColor SetBkMode SetDCBrushColor SetBkColor CreateSolidBrush BitBlt CreateCompatibleBitmap SelectObject CreateCompatibleDC DeleteDC SetViewportOrgEx DeleteObject SetROP2

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegOpenKeyExW RegSetValueExW RegEnumKeyExW RegCreateKeyExW RegDeleteKeyW RegCloseKey RegQueryInfoKeyW RegDeleteValueW

shell32

CommandLineToArgvW SHGetDesktopFolder SHGetPathFromIDListW SHGetFolderPathW SHGetSpecialFolderPathW SHGetSpecialFolderLocation

ole32

CoInitialize CoTaskMemAlloc CreateStreamOnHGlobal CoTaskMemRealloc CoTaskMemFree CoCreateInstance CoUninitialize

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipCreateBitmapFromScan0 GdipSetCompositingMode GdipGetImageGraphicsContext GdipCreateHBITMAPFromBitmap GdipDeleteGraphics GdipCreateFromHDC GdipFree GdipAlloc GdipDrawImageRectRectI GdipGraphicsClear GdipCloneBrush GdipCreateSolidFill GdipDeleteBrush GdipGetImageHeight GdipFillRectangleI GdipGetImageWidth GdipDisposeImage GdipGetRegionHRgn GdipReleaseDC GdipSaveGraphics GdipBitmapUnlockBits GdipGetDC GdipCreateMatrix GdipGetWorldTransform GdipTransformPointsI GdipCreateRegion GdipScaleWorldTransform GdipSetClipRectI GdipBitmapLockBits GdipGetClipBoundsI GdipGetMatrixElements GdipGetClip GdipRestoreGraphics GdipDeleteRegion GdipTranslateWorldTransform GdipDrawImagePointRectI GdipDeleteMatrix GdipGetImagePixelFormat GdipCloneBitmapAreaI GdipSetImageAttributesColorMatrix GdipDrawImageRectRect GdipDisposeImageAttributes GdipCreateImageAttributes GdiplusStartup GdiplusShutdown GdipCloneImage GdipCreateBitmapFromStream

dbghelp

MiniDumpWriteDump

generic

count=26, id=241, version=40116,

count=165, id=243, version=40116,

count=33, id=242, version=40116,

count=26, id=259, version=26706,

count=5, id=261, version=27054,

count=129, id=261, version=26706,

count=38, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=456, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=15, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=173, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,