General
- Target 2026-06-29_1ed64914d363def8e693182fd0d14aa2_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260630-pdfc2aew7k
- SHA256 282ce38a62d9e7edd1b41a55342c83590d5ea6d9df17812e7280f613ace60014
- MD5 1ed64914d363def8e693182fd0d14aa2
- SHA1 a2d3a91600ebef1c9d6656963e3bc417c13a64fe
- SHA512 166cc568e3e48ac6419637dc9a6223d4abb0cf8d275d3e8b5340cd9153e193c9cb610e97623691e17b5bcee008b25b7a6b8022dadc1ccbfc33659ccc99de1631
- SSDEEP 98304:xtS5drV2MeZ08Rdaz0PB4XqCc8br5MDG/5xO:aXoDrCcmr52qHO
- TLSH T1FA46AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-29_1ed64914d363def8e693182fd0d14aa2_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_1ed64914d363def8e693182fd0d14aa2_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_1ed64914d363def8e693182fd0d14aa2_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 282ce38a62d9e7edd1b41a55342c83590d5ea6d9df17812e7280f613ace60014
- MD5 1ed64914d363def8e693182fd0d14aa2
- SHA1 a2d3a91600ebef1c9d6656963e3bc417c13a64fe
- SHA512 166cc568e3e48ac6419637dc9a6223d4abb0cf8d275d3e8b5340cd9153e193c9cb610e97623691e17b5bcee008b25b7a6b8022dadc1ccbfc33659ccc99de1631
- SSDEEP 98304:xtS5drV2MeZ08Rdaz0PB4XqCc8br5MDG/5xO:aXoDrCcmr52qHO
- TLSH T1FA46AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1