General
- Target 2026-07-01_b112552c8cc4e1038b231b7d92a3880e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
- Size 4.2MB
- Sample260701-jtll4abx2s
- SHA256 5a4b18236a3091d2dc3d8d72b65f737fef990fd2304ddaaa7bac44dbcd6982d9
- MD5 b112552c8cc4e1038b231b7d92a3880e
- SHA1 45c1cfa5bc2a77ce74e901c7338dc452494dd971
- SHA512 40eba14954ab26251ce8792adce82d10eecabbdcc727c96f32994ccd9fb4b8352280d3c5fc9bf94e0f5e7f63be5d4fd24ea1f8db7e4df16e3daf034f0741571b
- SSDEEP 98304:hpLEpisP637+V482saEozbc5yXw8bi66TsLVn0:hiisCIvda17Xw8bi66gLVn0
- TLSH T1E016BE51BA4581B2EAE301F965BFA7BF083D9E244B34C4D397C0197E88305D36A3E796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_b112552c8cc4e1038b231b7d92a3880e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_b112552c8cc4e1038b231b7d92a3880e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_b112552c8cc4e1038b231b7d92a3880e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
- Size 4.2MB
- SHA256 5a4b18236a3091d2dc3d8d72b65f737fef990fd2304ddaaa7bac44dbcd6982d9
- MD5 b112552c8cc4e1038b231b7d92a3880e
- SHA1 45c1cfa5bc2a77ce74e901c7338dc452494dd971
- SHA512 40eba14954ab26251ce8792adce82d10eecabbdcc727c96f32994ccd9fb4b8352280d3c5fc9bf94e0f5e7f63be5d4fd24ea1f8db7e4df16e3daf034f0741571b
- SSDEEP 98304:hpLEpisP637+V482saEozbc5yXw8bi66TsLVn0:hiisCIvda17Xw8bi66gLVn0
- TLSH T1E016BE51BA4581B2EAE301F965BFA7BF083D9E244B34C4D397C0197E88305D36A3E796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.