General
- Target 2026-06-02_e3be5f5ebef0611c95b928821268d25d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- Sample260602-d4wxxset5m
- SHA256 bcdf82c7db5b213c982764403e49dfa08291d93522856f9fe00840599386a955
- MD5 e3be5f5ebef0611c95b928821268d25d
- SHA1 1a21ff3d07bb4b86ef2f2194ff41a0cbcfc3928c
- SHA512 cde8cf810368406bbcc9c2d52caa4a99cfab15ce2f5a95b9ab27cdaa9cbcefae5b6a0410bfa5533235febb3522dc10e6806c0d10242d4a574ca685dc66a9e8e8
- SSDEEP 98304:Qj7J7PwOzTRKshiZW7G/ZAO40d2vY2wj0FPhe2nmPIrIOpqlYYYqwo2BEnFoKVLF:Q5nzLa/ZAZBwYFPg3
- TLSH T18836AE11BA43C2B2D9D241F561BEEB7F683D5D28473484D397C80DAA48318D3663E7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_e3be5f5ebef0611c95b928821268d25d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_e3be5f5ebef0611c95b928821268d25d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_e3be5f5ebef0611c95b928821268d25d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- SHA256 bcdf82c7db5b213c982764403e49dfa08291d93522856f9fe00840599386a955
- MD5 e3be5f5ebef0611c95b928821268d25d
- SHA1 1a21ff3d07bb4b86ef2f2194ff41a0cbcfc3928c
- SHA512 cde8cf810368406bbcc9c2d52caa4a99cfab15ce2f5a95b9ab27cdaa9cbcefae5b6a0410bfa5533235febb3522dc10e6806c0d10242d4a574ca685dc66a9e8e8
- SSDEEP 98304:Qj7J7PwOzTRKshiZW7G/ZAO40d2vY2wj0FPhe2nmPIrIOpqlYYYqwo2BEnFoKVLF:Q5nzLa/ZAZBwYFPg3
- TLSH T18836AE11BA43C2B2D9D241F561BEEB7F683D5D28473484D397C80DAA48318D3663E7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.