2026-10-22_f3296f7881f2fb087c3a9637e342becf_coinminer_elex_floxif_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

General

Target
2026-10-22_f3296f7881f2fb087c3a9637e342becf_coinminer_elex_floxif_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz
Size 5.5MB
Sample261023-c2575shs8s
SHA256 b35c99fceee05b4a856941488ec76843b4b4fe1b7c7d6a6c6fe696aa59090129
MD5 f3296f7881f2fb087c3a9637e342becf
SHA1 7796d889c450cb8ae9968e63bbb738a21ea81e95
SHA512 36d623c5309c813e738c8d1d54cbb6958b6a21407b1dd8ba698061164d37d38b0ac6b692a440ba329e2753e85aac5406c7aefef987e6a8558f8f27997d04e51d
SSDEEP 98304:avflwT3xdhGLuSOJUcArkoAY+V4MKT0Ml95waHr1f:av9wThWLuIDB
TLSH
T1DC46C012B6C0D039E6D204714C2B675951FBED614A344AF7F38CBA2D3E749C2A23AB57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_f3296f7881f2fb087c3a9637e342becf_coinminer_elex_floxif_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

File Explorer

2026-10-22_f3296f7881f2fb087c3a9637e342becf_coinminer_elex_floxif_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

.exe 5.5MB

2026-10-22_f3296f7881f2fb087c3a9637e342becf_coinminer_elex_floxif_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

SHA256 b35c99fceee05b4a856941488ec76843b4b4fe1b7c7d6a6c6fe696aa59090129
MD5 f3296f7881f2fb087c3a9637e342becf
SHA1 7796d889c450cb8ae9968e63bbb738a21ea81e95
SHA512 36d623c5309c813e738c8d1d54cbb6958b6a21407b1dd8ba698061164d37d38b0ac6b692a440ba329e2753e85aac5406c7aefef987e6a8558f8f27997d04e51d
SSDEEP 98304:avflwT3xdhGLuSOJUcArkoAY+V4MKT0Ml95waHr1f:av9wThWLuIDB
TLSH
T1DC46C012B6C0D039E6D204714C2B675951FBED614A344AF7F38CBA2D3E749C2A23AB57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2271892

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=23, id=241, version=40116,

count=198, id=243, version=40116,

count=33, id=242, version=40116,

count=2, id=261, version=23013,

count=1, id=199, version=41118,

count=26, id=259, version=24123,

count=67, id=261, version=24123,

count=42, id=260, version=24123,

count=1, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=4, id=14, version=7299,

count=203, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=35, id=265, version=24215,

count=16, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=715, id=1, productName=Unmarked objects,

count=367, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=3, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_f3296f7881f2fb087c3a9637e342becf_coinminer_elex_floxif_glassworm_hawkeye_luca-stealer_mespinoza_njrat_remcos_zxxz

generic