General
- Target 2026-06-27_12d58067df11104815a76315fc6638b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
- Size 3.7MB
- Sample260629-lxjb9act4p
- SHA256 5d6ddcd9084f931560a3107186578d59de803a062fc161f9854275cbd43ba47b
- MD5 12d58067df11104815a76315fc6638b5
- SHA1 a257f7ff94835fa8f2228dde6e1ab69a268c6b71
- SHA512 c29df84b51868b636f4965d6dca2d4f0742ce6d6373844f9ea32636869ad93d70f561b7c5e3bcf9f7481ec3cd904320f5c1f0e609246b74136970b937444687e
- SSDEEP 49152:lPvlBF39nQtowPoIOifxjYpyz4Pp/6K6tBLrQ0ZcMUPsbz9jmWO21QCU9eh4:lPvl39QJdOifxMpcM6K6/aMp
- TLSH T12406CF05FB41C0F1E9D602F952AAA77F493E5D34473488D397D02DBA49311D2AA3F3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_12d58067df11104815a76315fc6638b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_12d58067df11104815a76315fc6638b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_12d58067df11104815a76315fc6638b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
- Size 3.7MB
- SHA256 5d6ddcd9084f931560a3107186578d59de803a062fc161f9854275cbd43ba47b
- MD5 12d58067df11104815a76315fc6638b5
- SHA1 a257f7ff94835fa8f2228dde6e1ab69a268c6b71
- SHA512 c29df84b51868b636f4965d6dca2d4f0742ce6d6373844f9ea32636869ad93d70f561b7c5e3bcf9f7481ec3cd904320f5c1f0e609246b74136970b937444687e
- SSDEEP 49152:lPvlBF39nQtowPoIOifxjYpyz4Pp/6K6tBLrQ0ZcMUPsbz9jmWO21QCU9eh4:lPvl39QJdOifxMpcM6K6/aMp
- TLSH T12406CF05FB41C0F1E9D602F952AAA77F493E5D34473488D397D02DBA49311D2AA3F3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.