General
- Target 2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos
- Size 2.6MB
- Sample251016-p1fmbazthx
- SHA256 fa5d154304b5e0044f1d592c39b4d645b59e22f154eb32a13a2b2b1196b30391
- MD5 7b83021ec0bd5b828cb953281a1d9bcd
- SHA1 111b8be309841a72663ed847e0a674f05c2355a6
- SHA512 34cde4aeaeaabfcd0a6cd06fe50d61209032c006218eb91649b3f07bf28449f899c9cef1ae5da172d74f03578ea766447b23609b10a87286391e9f358f65a6de
- SSDEEP 49152:0MvcUuh3ZhJvDrUqdCxu9sQX59RZFh9wElrbjqtOdA1Es6X0EdrYs5fJxMshfxc:0Sruh33JUrEiO3FhDrwO21fQLFhRhf6
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos.exe
Resource
win10v2004-20250619-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos.exe
Resource
win11-20251015-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos
- Size 2.6MB
- SHA256 fa5d154304b5e0044f1d592c39b4d645b59e22f154eb32a13a2b2b1196b30391
- MD5 7b83021ec0bd5b828cb953281a1d9bcd
- SHA1 111b8be309841a72663ed847e0a674f05c2355a6
- SHA512 34cde4aeaeaabfcd0a6cd06fe50d61209032c006218eb91649b3f07bf28449f899c9cef1ae5da172d74f03578ea766447b23609b10a87286391e9f358f65a6de
- SSDEEP 49152:0MvcUuh3ZhJvDrUqdCxu9sQX59RZFh9wElrbjqtOdA1Es6X0EdrYs5fJxMshfxc:0Sruh33JUrEiO3FhDrwO21fQLFhRhf6
- MD5 SHA1 SHA512 SSDEEP
-
Checks for any installed AV software in registry
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.