General
- Target 2026-07-05_131ca9fe904198aeaf5434676e018d34_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 3.7MB
- Sample260705-cbk5aacs3n
- SHA256 f42059975d9b349feb787f6cc91981e1d02796b6d97a66c0410963a7a15e6c1d
- MD5 131ca9fe904198aeaf5434676e018d34
- SHA1 65867b3adfda9ba9cb51c8751ba9b94fc750d4d6
- SHA512 5356076b0e85590a1f8c7df5b2b187c8f64a48e5b8d161e2e9a3418d30abc48303f1f70c51dc5d024b53c72b71648bba4395eb498afbf0347036157ad171a04c
- SSDEEP 49152:NpLlyQlGhS0zvEemdZ+esfuc3rMOAqLJrirkXHicT9F0SPCHzacTZop77P/v+dM5:NpL9ijzmsfuc3rzAK0kXx0hV
- TLSH T1CF06C051FF46C0B2E4D346FD52AEAB7F093C6E24473488D397D019AA89311D26A3F369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_131ca9fe904198aeaf5434676e018d34_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_131ca9fe904198aeaf5434676e018d34_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_131ca9fe904198aeaf5434676e018d34_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 3.7MB
- SHA256 f42059975d9b349feb787f6cc91981e1d02796b6d97a66c0410963a7a15e6c1d
- MD5 131ca9fe904198aeaf5434676e018d34
- SHA1 65867b3adfda9ba9cb51c8751ba9b94fc750d4d6
- SHA512 5356076b0e85590a1f8c7df5b2b187c8f64a48e5b8d161e2e9a3418d30abc48303f1f70c51dc5d024b53c72b71648bba4395eb498afbf0347036157ad171a04c
- SSDEEP 49152:NpLlyQlGhS0zvEemdZ+esfuc3rMOAqLJrirkXHicT9F0SPCHzacTZop77P/v+dM5:NpL9ijzmsfuc3rzAK0kXx0hV
- TLSH T1CF06C051FF46C0B2E4D346FD52AEAB7F093C6E24473488D397D019AA89311D26A3F369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.