General
- Target 2026-07-03_1ad8921cd4562848e0f2335ca0d839af_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_metamorfo_njrat_revil
- Size 3.9MB
- Sample260703-dwe97sfy3m
- SHA256 ffad4546f7830af250fd6c31beb259dc16222712932ec9b1c60fc051f5c9ddaa
- MD5 1ad8921cd4562848e0f2335ca0d839af
- SHA1 73c8280f24c33f55000c71734dedf928c45d6021
- SHA512 54412e264f20e39d3dc1dfadd8b6dfed152490e7a172caa6518984cb131fc0fa9cfc8ba27df1a3d4894ca2ebb5e9d2d04bb998cd0d3eabd57b9f1866299fb183
- SSDEEP 98304:hPQlQUgP/A92qwbBnkZELMI25n3q2bvv4uNeVfgJ:awVBUWp2bvfNeVoJ
- TLSH T10D16BF13F9808471E4730136DA69ABB59DBEAD302379D4C36BA938594F704D2B73A363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-03_1ad8921cd4562848e0f2335ca0d839af_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_metamorfo_njrat_revil.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_1ad8921cd4562848e0f2335ca0d839af_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_metamorfo_njrat_revil.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_1ad8921cd4562848e0f2335ca0d839af_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_metamorfo_njrat_revil
- Size 3.9MB
- SHA256 ffad4546f7830af250fd6c31beb259dc16222712932ec9b1c60fc051f5c9ddaa
- MD5 1ad8921cd4562848e0f2335ca0d839af
- SHA1 73c8280f24c33f55000c71734dedf928c45d6021
- SHA512 54412e264f20e39d3dc1dfadd8b6dfed152490e7a172caa6518984cb131fc0fa9cfc8ba27df1a3d4894ca2ebb5e9d2d04bb998cd0d3eabd57b9f1866299fb183
- SSDEEP 98304:hPQlQUgP/A92qwbBnkZELMI25n3q2bvv4uNeVfgJ:awVBUWp2bvfNeVoJ
- TLSH T10D16BF13F9808471E4730136DA69ABB59DBEAD302379D4C36BA938594F704D2B73A363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.