2026-10-15_d551e29782ec2311078a0fb1c438c9ab_coinminer_elex_floxif_glassworm_poet-rat_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-15_d551e29782ec2311078a0fb1c438c9ab_coinminer_elex_floxif_glassworm_poet-rat_sliver_snatch
Size 17.9MB
Sample261016-d1xp2sfd93
SHA256 eae6033ff8cee8e314745a57c5ec984d71c1b97506737d5f496a0a2d1d3922d8
MD5 d551e29782ec2311078a0fb1c438c9ab
SHA1 e6be6b5f15bcc993550f71dd406ce02793021c38
SHA512 bb9150f89b10ad8daf245c496d432f99f7137071ac04dff100ab78b64d456901188bcd081d6f0ef6c1d4d499c1dfaf1bf270381d228d1008c383c517ae806522
SSDEEP 196608:h+4f/vx9opqeESF+64Nwvjf27jYXg5gG+VbzFZhIZtxTyA6LMDOTbJWB:f5qqeTju3YXg5gV1uvx6LM6IB
TLSH
T135178C50F8EF11FAEF821430A977523F733491059729DEC3C6888D66F8A7AD5172329A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-10-15_d551e29782ec2311078a0fb1c438c9ab_coinminer_elex_floxif_glassworm_poet-rat_sliver_snatch

File Explorer

2026-10-15_d551e29782ec2311078a0fb1c438c9ab_coinminer_elex_floxif_glassworm_poet-rat_sliver_snatch

.exe 17.9MB

2026-10-15_d551e29782ec2311078a0fb1c438c9ab_coinminer_elex_floxif_glassworm_poet-rat_sliver_snatch

IMPHASH ca04e1e58d6a21ec254582373c84dfcb
SHA256 eae6033ff8cee8e314745a57c5ec984d71c1b97506737d5f496a0a2d1d3922d8
MD5 d551e29782ec2311078a0fb1c438c9ab
SHA1 e6be6b5f15bcc993550f71dd406ce02793021c38
SHA512 bb9150f89b10ad8daf245c496d432f99f7137071ac04dff100ab78b64d456901188bcd081d6f0ef6c1d4d499c1dfaf1bf270381d228d1008c383c517ae806522
SSDEEP 196608:h+4f/vx9opqeESF+64Nwvjf27jYXg5gG+VbzFZhIZtxTyA6LMDOTbJWB:f5qqeTju3YXg5gV1uvx6LM6IB
TLSH
T135178C50F8EF11FAEF821430A977523F733491059729DEC3C6888D66F8A7AD5172329A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

3a:4c:33:13:ab:8a:b0:ef:f2:f9:5e:19:e8:0d:44:39:04:e5:27:e1:97:1a:4a:e2:c2:af:01:ad:b2:92:40:de

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Chains

Nov 17, 2020

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Serial Number

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 24, 2020 - Mar 25, 2021

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

387504

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.6MB

Virtual Size

6.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

373KB

Virtual Size

477KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

281B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

864KB

Virtual Size

864KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/63

Size

104KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/99

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/112

Size

939KB

Virtual Size

938KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/124

Size

277KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

990B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.symtab

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

244KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-10-15_d551e29782ec2311078a0fb1c438c9ab_coinminer_elex_floxif_glassworm_poet-rat_sliver_snatch

PE Signature issue

kernel32

generic