2026-11-13_6e8052e5c57488c6621c64abd55563d6_coinminer_elex_floxif_glassworm_luca-stealer_mespinoza_njrat_remcos_zxxz

General

Target
2026-11-13_6e8052e5c57488c6621c64abd55563d6_coinminer_elex_floxif_glassworm_luca-stealer_mespinoza_njrat_remcos_zxxz
Size 4.5MB
Sample261114-nfapwsf12y
SHA256 37f9f893b593006bc2bbe7fd7ab21f402c5098717ccb18298b2f3f62b5e0614c
MD5 6e8052e5c57488c6621c64abd55563d6
SHA1 dc07bca319d935cf083bde396549222f07cf0510
SHA512 2f818ffe40ce33bef6c66054c9d7f72cdd3075ebcae02e4db515e0afd85837c55f54d940d3976243590004130cf646dafadb9857db5e341a08cd2b00d662763b
SSDEEP 49152:zx03rTNg/OqfwR87Vox/3SuTRbT9PYOwcYFhaLG+NdAM8rHbLXv3aDKduRmWJgK1:zxsgGGwR87Of/gOsvSDsomWHQXRMgg
TLSH
T1BC26BF127AC0C075D7D204314C2B776852F7EEB0197186B77399BA2D3A346D2A93EB63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-13_6e8052e5c57488c6621c64abd55563d6_coinminer_elex_floxif_glassworm_luca-stealer_mespinoza_njrat_remcos_zxxz

File Explorer

2026-11-13_6e8052e5c57488c6621c64abd55563d6_coinminer_elex_floxif_glassworm_luca-stealer_mespinoza_njrat_remcos_zxxz

.exe 4.5MB

2026-11-13_6e8052e5c57488c6621c64abd55563d6_coinminer_elex_floxif_glassworm_luca-stealer_mespinoza_njrat_remcos_zxxz

SHA256 37f9f893b593006bc2bbe7fd7ab21f402c5098717ccb18298b2f3f62b5e0614c
MD5 6e8052e5c57488c6621c64abd55563d6
SHA1 dc07bca319d935cf083bde396549222f07cf0510
SHA512 2f818ffe40ce33bef6c66054c9d7f72cdd3075ebcae02e4db515e0afd85837c55f54d940d3976243590004130cf646dafadb9857db5e341a08cd2b00d662763b
SSDEEP 49152:zx03rTNg/OqfwR87Vox/3SuTRbT9PYOwcYFhaLG+NdAM8rHbLXv3aDKduRmWJgK1:zxsgGGwR87Of/gOsvSDsomWHQXRMgg
TLSH
T1BC26BF127AC0C075D7D204314C2B776852F7EEB0197186B77399BA2D3A346D2A93EB63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2382692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=26, id=241, version=40116,

count=198, id=243, version=40116,

count=37, id=242, version=40116,

count=2, id=261, version=23013,

count=2, id=199, version=41118,

count=26, id=259, version=24123,

count=124, id=261, version=24123,

count=44, id=260, version=24123,

count=1, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=4, id=14, version=7299,

count=35, id=265, version=24215,

count=203, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=16, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=758, id=1, productName=Unmarked objects,

count=385, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=3, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-13_6e8052e5c57488c6621c64abd55563d6_coinminer_elex_floxif_glassworm_luca-stealer_mespinoza_njrat_remcos_zxxz

generic