General
- Target 2026-07-09_1933b1079c4c935598beda50b731b42e_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260709-qb4hhsb17v
- SHA256 be677e5ece157756262b5526606ac1290c18faa5b7b0f824a723da926a18b5d2
- MD5 1933b1079c4c935598beda50b731b42e
- SHA1 c52db22b33e53cbcd1e0f92f4081c3b228a34152
- SHA512 3c8247a5e8f0f9c14784939565a76f95d43763bfeec0ba3ff659d3cbd897ce34e1b0ecc83bf8642036e26099096a358659262140759ce82fefb3aec58794b0e1
- SSDEEP 98304:8tS5drV2MeZ08Rdaz0PB4XqCc8br5MDG/5xx:nXoDrCcmr52qHx
- TLSH T1D546AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-09_1933b1079c4c935598beda50b731b42e_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_1933b1079c4c935598beda50b731b42e_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_1933b1079c4c935598beda50b731b42e_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 be677e5ece157756262b5526606ac1290c18faa5b7b0f824a723da926a18b5d2
- MD5 1933b1079c4c935598beda50b731b42e
- SHA1 c52db22b33e53cbcd1e0f92f4081c3b228a34152
- SHA512 3c8247a5e8f0f9c14784939565a76f95d43763bfeec0ba3ff659d3cbd897ce34e1b0ecc83bf8642036e26099096a358659262140759ce82fefb3aec58794b0e1
- SSDEEP 98304:8tS5drV2MeZ08Rdaz0PB4XqCc8br5MDG/5xx:nXoDrCcmr52qHx
- TLSH T1D546AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1