General
- Target 2026-06-27_1e9b4058a8299ffc02d2b34d997624ee_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
- Size 3.8MB
- Sample260629-lema7aby7q
- SHA256 df940a0f9b76c81b82cd52b70eec44d2cdf38ab9e893cafa16fd93075b221204
- MD5 1e9b4058a8299ffc02d2b34d997624ee
- SHA1 cb19fd3d5c0b3fd28f2b610146d60a2334379121
- SHA512 6d33128b556006ed8213f4ffe369bdb2a3b6ca3e5431feea969bf0440fd027743ab8eaed71a84056f380f2d8c360305d178cb36bff61cd96fa623d84399afe55
- SSDEEP 98304:VJrUtLE40mG8VtPLA18P//sByBRtwS5MS:V+tLE7mRTPPFXwvS
- TLSH T17F06C081BF4280F2D8D301F996AAA77F093D5E244734D8D397D429BA8D311D26B3E369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_1e9b4058a8299ffc02d2b34d997624ee_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_1e9b4058a8299ffc02d2b34d997624ee_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_1e9b4058a8299ffc02d2b34d997624ee_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
- Size 3.8MB
- SHA256 df940a0f9b76c81b82cd52b70eec44d2cdf38ab9e893cafa16fd93075b221204
- MD5 1e9b4058a8299ffc02d2b34d997624ee
- SHA1 cb19fd3d5c0b3fd28f2b610146d60a2334379121
- SHA512 6d33128b556006ed8213f4ffe369bdb2a3b6ca3e5431feea969bf0440fd027743ab8eaed71a84056f380f2d8c360305d178cb36bff61cd96fa623d84399afe55
- SSDEEP 98304:VJrUtLE40mG8VtPLA18P//sByBRtwS5MS:V+tLE7mRTPPFXwvS
- TLSH T17F06C081BF4280F2D8D301F996AAA77F093D5E244734D8D397D429BA8D311D26B3E369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.