2026-10-19_7db8a26f4cb0505b80b275636f3e7ad9_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

General

Target
2026-10-19_7db8a26f4cb0505b80b275636f3e7ad9_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz
Size 4.8MB
Sample261020-srev7sft2n
SHA256 f2d8ba403c69d8d877bde389b7af2854c44b74feb3b1fb7decfe0a1fc7c13cce
MD5 7db8a26f4cb0505b80b275636f3e7ad9
SHA1 2498adab91121ab266734f12388805199b977840
SHA512 f84c96558ed37143609703eb3987f4705bb33b54df39662127b5b0f4bacc7ddf9d45d48f211aea79174bbdcf354202ac18f7dd22d4097cf98fd2e81033ef2687
SSDEEP 98304:HAGgVdH/7GFcyNLLi781DEYYo6LRYGvw8nrdQ:HEl/cct8Gm
TLSH
T1A236BF127A84C039D6E209714C2BB75851FBEDA40E758AF773DCBA2D3A305C2A639753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_7db8a26f4cb0505b80b275636f3e7ad9_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

File Explorer

2026-10-19_7db8a26f4cb0505b80b275636f3e7ad9_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

.exe 4.8MB

2026-10-19_7db8a26f4cb0505b80b275636f3e7ad9_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

SHA256 f2d8ba403c69d8d877bde389b7af2854c44b74feb3b1fb7decfe0a1fc7c13cce
MD5 7db8a26f4cb0505b80b275636f3e7ad9
SHA1 2498adab91121ab266734f12388805199b977840
SHA512 f84c96558ed37143609703eb3987f4705bb33b54df39662127b5b0f4bacc7ddf9d45d48f211aea79174bbdcf354202ac18f7dd22d4097cf98fd2e81033ef2687
SSDEEP 98304:HAGgVdH/7GFcyNLLi781DEYYo6LRYGvw8nrdQ:HEl/cct8Gm
TLSH
T1A236BF127A84C039D6E209714C2BB75851FBEDA40E758AF773DCBA2D3A305C2A639753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2334050

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=23, id=241, version=40116,

count=197, id=243, version=40116,

count=33, id=242, version=40116,

count=2, id=261, version=23013,

count=1, id=199, version=41118,

count=26, id=259, version=23907,

count=68, id=261, version=23907,

count=42, id=260, version=23907,

count=1, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=4, id=14, version=7299,

count=203, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=35, id=265, version=23918,

count=16, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=715, id=1, productName=Unmarked objects,

count=366, id=261, productName=VS2015 UPD2 build 23918, version=23918,

count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,

count=3, id=151,

count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_7db8a26f4cb0505b80b275636f3e7ad9_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

generic