General

  • Target
    2026-10-22_bdab74b89c997e00263f44095a70e96d_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
  • Size 4.4MB
  • Sample261023-2cgwpavy4m
  • SHA256 9e61668bc78a3422089d8f074dcf57e0cbc08f9123dfb46a0cfe91a22b2f9ae5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-10-22_bdab74b89c997e00263f44095a70e96d_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
    .exe 4.4MB

2026-10-22_bdab74b89c997e00263f44095a70e96d_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader

  • IMPHASH 813be05ce047c5c8a0643cb2399296be
  • SHA256 9e61668bc78a3422089d8f074dcf57e0cbc08f9123dfb46a0cfe91a22b2f9ae5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
81:5b:19:a9:03:26:a5:fd:d4:32:dc:bf:7b:55:03:1c:15:8b:b0:56:fa:77:1b:da:03:bf:c9:ad:48:2c:fb:d4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91330110MA2KHXUW41,CN=杭州亿格云科技有限公司,O=杭州亿格云科技有限公司,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130848414e475a484f55,1.3.6.1.4.1.311.60.2.1.2=#13085a48454a49414e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
2283955
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\jenkins\dev\yunshu-windows-app\Release\CcMessage.pdb