General
- Target 2026-07-05_fb0fa60b010fc7d08431b8ff72a389eb_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- Sample260705-dv16aagy8t
- SHA256 21b1d1aaeaf51378a987a0c483955182d5ebaba805289125daa6a1a7e47bc839
- MD5 fb0fa60b010fc7d08431b8ff72a389eb
- SHA1 dc4a9fdeb4252cdab09d03bce9f6b566309d1c3b
- SHA512 8806538c2e6d246952b5c84ae76be4fb61614f909449e89e0ad825481df6a69898546d1d73be4d7235d208e877256baba9a5b24613ed93e3e02981bab454a0be
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0Wwj:FyIvEeUFhlUMFFjObybMs8
- TLSH T13B66F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_fb0fa60b010fc7d08431b8ff72a389eb_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_fb0fa60b010fc7d08431b8ff72a389eb_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_fb0fa60b010fc7d08431b8ff72a389eb_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- SHA256 21b1d1aaeaf51378a987a0c483955182d5ebaba805289125daa6a1a7e47bc839
- MD5 fb0fa60b010fc7d08431b8ff72a389eb
- SHA1 dc4a9fdeb4252cdab09d03bce9f6b566309d1c3b
- SHA512 8806538c2e6d246952b5c84ae76be4fb61614f909449e89e0ad825481df6a69898546d1d73be4d7235d208e877256baba9a5b24613ed93e3e02981bab454a0be
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0Wwj:FyIvEeUFhlUMFFjObybMs8
- TLSH T13B66F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.