General
- Target 2026-07-09_129461764e191f4e3abebf33975fc894_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- Sample260709-qc46faa17j
- SHA256 a3cf6b309d5e5d328cdfae76685205c5adf60684d7bc59a2608663c8cd20bac4
- MD5 129461764e191f4e3abebf33975fc894
- SHA1 71a107fb0a1025ba31ccaf18ae586583aa2ca0fc
- SHA512 b00c4fe21b58fe92cfe167ead11113420bc6b74e97de12115d78ac2c65bddcf4399c7413b488066597cad1255f4ff112bed82f6061e15af4c74972b153c8ea86
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0WwU:FyIvEeUFhlUMFFjObybMsR
- TLSH T19C66F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_129461764e191f4e3abebf33975fc894_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_129461764e191f4e3abebf33975fc894_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_129461764e191f4e3abebf33975fc894_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- SHA256 a3cf6b309d5e5d328cdfae76685205c5adf60684d7bc59a2608663c8cd20bac4
- MD5 129461764e191f4e3abebf33975fc894
- SHA1 71a107fb0a1025ba31ccaf18ae586583aa2ca0fc
- SHA512 b00c4fe21b58fe92cfe167ead11113420bc6b74e97de12115d78ac2c65bddcf4399c7413b488066597cad1255f4ff112bed82f6061e15af4c74972b153c8ea86
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0WwU:FyIvEeUFhlUMFFjObybMsR
- TLSH T19C66F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.