General
- Target 2026-07-10_f5067717d496a756f641bd6f1bb46ef7_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260710-1lacjaa15j
- SHA256 72c6556da9b3fe5b58c3fb29d55a508e48849eb063d038e8c99706998aaad033
- MD5 f5067717d496a756f641bd6f1bb46ef7
- SHA1 8a43ea1782c6205e1e0d0d62b031ec7a926102d4
- SHA512 a4974e9a816acecae092a9c8976fd3921c5b1649649bb18d6213394b1191c28e012262e9b597dc0d647fdb58a624a26a5ca62aee328710adfc9ba38278b09ceb
- SSDEEP 98304:HtS5drV2MeZ08Rdaz0PB4XqCc8br5MDG/5xf:kXoDrCcmr52qHf
- TLSH T15546AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-10_f5067717d496a756f641bd6f1bb46ef7_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_f5067717d496a756f641bd6f1bb46ef7_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_f5067717d496a756f641bd6f1bb46ef7_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 72c6556da9b3fe5b58c3fb29d55a508e48849eb063d038e8c99706998aaad033
- MD5 f5067717d496a756f641bd6f1bb46ef7
- SHA1 8a43ea1782c6205e1e0d0d62b031ec7a926102d4
- SHA512 a4974e9a816acecae092a9c8976fd3921c5b1649649bb18d6213394b1191c28e012262e9b597dc0d647fdb58a624a26a5ca62aee328710adfc9ba38278b09ceb
- SSDEEP 98304:HtS5drV2MeZ08Rdaz0PB4XqCc8br5MDG/5xf:kXoDrCcmr52qHf
- TLSH T15546AF01BB85C5B1F59201B0587AAB7A583EBE38573089C7A7D11E2A84312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1