General
- Target 2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil
- Size 32.0MB
- Sample260701-a79fmsbx4n
- SHA256 3217d721394a34f42d77251e696709703e1cc7471723a810a9dd704be6a5f255
- MD5 0af83b1a1f3bc96337b7d4f9cd205eb8
- SHA1 baa943b2b3a23621564653768b5f8120446fb23c
- SHA512 b3d0c65453292a43c9fbcc517cfc9ef42eab24121b91670ca745891032c16f758f894c22496a86f19a2f074b2a248a37c504d75024b57d33ad8beed7c3ec59cd
- SSDEEP 786432:TdiPKJiXe9ZWISlFoXhx3wXo5t9iase+mxpVy41907LKTB:TdEXeuISlyDx/9i6907LKd
- TLSH T1F4772302FB4281B2E591017571FBAFBF883D59248B3195D3D7D42A6E88301D16B3B7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_0af83b1a1f3bc96337b7d4f9cd205eb8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat_revil
- Size 32.0MB
- SHA256 3217d721394a34f42d77251e696709703e1cc7471723a810a9dd704be6a5f255
- MD5 0af83b1a1f3bc96337b7d4f9cd205eb8
- SHA1 baa943b2b3a23621564653768b5f8120446fb23c
- SHA512 b3d0c65453292a43c9fbcc517cfc9ef42eab24121b91670ca745891032c16f758f894c22496a86f19a2f074b2a248a37c504d75024b57d33ad8beed7c3ec59cd
- SSDEEP 786432:TdiPKJiXe9ZWISlFoXhx3wXo5t9iase+mxpVy41907LKTB:TdEXeuISlyDx/9i6907LKd
- TLSH T1F4772302FB4281B2E591017571FBAFBF883D59248B3195D3D7D42A6E88301D16B3B7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.