General
- Target 2026-05-31_dabc70372ab007b6b66d5bae560f9a1a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- Sample260531-mahymsgw3l
- SHA256 cc90e92322db576f38e96ff552c2cd5fe60541ab69c0a0fb32153df59bb1f6da
- MD5 dabc70372ab007b6b66d5bae560f9a1a
- SHA1 c3d7090dfefbb5211952a641de60230f584bb305
- SHA512 12de5002df99ae46392939c05f69720ec60c250eb0499c0c8a62f05141f0eae960c3fe26b7ca83cb328e0b619b1215f9fe30b31aad38f40cf8e5dee4d11891a8
- SSDEEP 98304:Q3XuHxMKofL/B1XDVXwXZPWqG56i5VhRCo4Yp:QKkbXBwwci51CNYp
- TLSH T13236CF12FB8281B2D892027525BAA7BF0C3E9D14472885C3E7D46D7E49315D2A73F3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_dabc70372ab007b6b66d5bae560f9a1a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_dabc70372ab007b6b66d5bae560f9a1a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_dabc70372ab007b6b66d5bae560f9a1a_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- SHA256 cc90e92322db576f38e96ff552c2cd5fe60541ab69c0a0fb32153df59bb1f6da
- MD5 dabc70372ab007b6b66d5bae560f9a1a
- SHA1 c3d7090dfefbb5211952a641de60230f584bb305
- SHA512 12de5002df99ae46392939c05f69720ec60c250eb0499c0c8a62f05141f0eae960c3fe26b7ca83cb328e0b619b1215f9fe30b31aad38f40cf8e5dee4d11891a8
- SSDEEP 98304:Q3XuHxMKofL/B1XDVXwXZPWqG56i5VhRCo4Yp:QKkbXBwwci51CNYp
- TLSH T13236CF12FB8281B2D892027525BAA7BF0C3E9D14472885C3E7D46D7E49315D2A73F3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.