General
- Target 2026-06-26_f9a8f220db3c2f9917026072430b3f97_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 3.7MB
- Sample260629-m1ph4sdt8m
- SHA256 f45868ee939460519c856ebd78b5913a30fbd220f1e787177b194fc02ca40078
- MD5 f9a8f220db3c2f9917026072430b3f97
- SHA1 9d44b627f886b7ca4602ad4680beb7897e022deb
- SHA512 ec595f52d9530729fd1948497a7b7dc59690579f3e198c2d4acafc16be62800dd5f5d0f9550db4dbebd93bfcc3c938f7fc7a2d9d5855a4ad49455b2a982fb1ee
- SSDEEP 98304:pR7RQ56d8Y1TxbPlscTiNFfeW4q137kW:pcwdfhsQi/34
- TLSH T1FB06CF41BB8281B2E8D301F995EAA77F4A3D5D244734C8E387D02DBA89314D2673F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_f9a8f220db3c2f9917026072430b3f97_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_f9a8f220db3c2f9917026072430b3f97_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_f9a8f220db3c2f9917026072430b3f97_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 3.7MB
- SHA256 f45868ee939460519c856ebd78b5913a30fbd220f1e787177b194fc02ca40078
- MD5 f9a8f220db3c2f9917026072430b3f97
- SHA1 9d44b627f886b7ca4602ad4680beb7897e022deb
- SHA512 ec595f52d9530729fd1948497a7b7dc59690579f3e198c2d4acafc16be62800dd5f5d0f9550db4dbebd93bfcc3c938f7fc7a2d9d5855a4ad49455b2a982fb1ee
- SSDEEP 98304:pR7RQ56d8Y1TxbPlscTiNFfeW4q137kW:pcwdfhsQi/34
- TLSH T1FB06CF41BB8281B2E8D301F995EAA77F4A3D5D244734C8E387D02DBA89314D2673F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.