General
- Target 2026-07-07_76390c3c6fc5063cf39d86ff9a43ef2e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- Sample260707-jm45vsh14p
- SHA256 a7a6e81f9c589410cf37f5a1d915996530f2f80293d6bae781e215d99eb67639
- MD5 76390c3c6fc5063cf39d86ff9a43ef2e
- SHA1 fe9a0d940bdd11726b618f1b80efc6ba7308fbb1
- SHA512 27445836bf98bb5627693c05f4ba3c38adabaeaf5255c3d975063782ca9dde9078345085f8ef54dc53b034159f7ba20f5d79a97c1b7780a18e2d52520cefd23a
- SSDEEP 98304:F/z6C0U9Nyh3vvX148dnMYHkLJ4wUWlMK6Bk4:Fj0UiBa82+wUKMK6Bk4
- TLSH T1A936BE41BA4581B1D8A301F956FEFB7F043DAD29473488E3D7C01E7A4A319D2663E72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_76390c3c6fc5063cf39d86ff9a43ef2e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_76390c3c6fc5063cf39d86ff9a43ef2e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_76390c3c6fc5063cf39d86ff9a43ef2e_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- SHA256 a7a6e81f9c589410cf37f5a1d915996530f2f80293d6bae781e215d99eb67639
- MD5 76390c3c6fc5063cf39d86ff9a43ef2e
- SHA1 fe9a0d940bdd11726b618f1b80efc6ba7308fbb1
- SHA512 27445836bf98bb5627693c05f4ba3c38adabaeaf5255c3d975063782ca9dde9078345085f8ef54dc53b034159f7ba20f5d79a97c1b7780a18e2d52520cefd23a
- SSDEEP 98304:F/z6C0U9Nyh3vvX148dnMYHkLJ4wUWlMK6Bk4:Fj0UiBa82+wUKMK6Bk4
- TLSH T1A936BE41BA4581B1D8A301F956FEFB7F043DAD29473488E3D7C01E7A4A319D2663E72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.