General
- Target 2026-07-08_33a194a4530566c813fcced8e9e51ab3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260708-fe873aa151
- SHA256 291c3b70a93496d9a03f448d9851415b11d1a1d52017c27fde938afbb36693d6
- MD5 33a194a4530566c813fcced8e9e51ab3
- SHA1 daa31f2ae46a2b03349dd28c4902c0332176c698
- SHA512 764c198183edaf2a3ca02c1945dd7a840b611d75ee59ddabdc15f727f38095d8431f8fb79c42255aa9004f54b0c5e2bd15960b18c9c0908bd3d873767b2aa340
- SSDEEP 98304:ttS5drV2MeZ08Rdaz0PB4XqCc8br5MUG/rx:+XoDrCcmr5dqd
- TLSH T1E146AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_33a194a4530566c813fcced8e9e51ab3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-08_33a194a4530566c813fcced8e9e51ab3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-08_33a194a4530566c813fcced8e9e51ab3_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 291c3b70a93496d9a03f448d9851415b11d1a1d52017c27fde938afbb36693d6
- MD5 33a194a4530566c813fcced8e9e51ab3
- SHA1 daa31f2ae46a2b03349dd28c4902c0332176c698
- SHA512 764c198183edaf2a3ca02c1945dd7a840b611d75ee59ddabdc15f727f38095d8431f8fb79c42255aa9004f54b0c5e2bd15960b18c9c0908bd3d873767b2aa340
- SSDEEP 98304:ttS5drV2MeZ08Rdaz0PB4XqCc8br5MUG/rx:+XoDrCcmr5dqd
- TLSH T1E146AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1