General
- Target 2026-07-14_21138ed565aaf54eb028c31a43c6c1e0_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- Sample260714-ey3zqaes2q
- SHA256 e9de32974b840a43b264be876c219e9a276a16c97c16659307af7e80e6545879
- MD5 21138ed565aaf54eb028c31a43c6c1e0
- SHA1 a93f76b2675d9e1ca9e473cc16a660c509fb8679
- SHA512 1865426e30b0621a39e4e8f02910474ddf050afd67c1f2b95da8d98b04c38049126eee2ca4ab3da91562784c6b52b98697b9223363d0f37b32cbc5b9090db16d
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0Wwi:FyIvEeUFhlUMFFjObybMsb
- TLSH T1E766F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_21138ed565aaf54eb028c31a43c6c1e0_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_21138ed565aaf54eb028c31a43c6c1e0_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_21138ed565aaf54eb028c31a43c6c1e0_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- SHA256 e9de32974b840a43b264be876c219e9a276a16c97c16659307af7e80e6545879
- MD5 21138ed565aaf54eb028c31a43c6c1e0
- SHA1 a93f76b2675d9e1ca9e473cc16a660c509fb8679
- SHA512 1865426e30b0621a39e4e8f02910474ddf050afd67c1f2b95da8d98b04c38049126eee2ca4ab3da91562784c6b52b98697b9223363d0f37b32cbc5b9090db16d
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0Wwi:FyIvEeUFhlUMFFjObybMsb
- TLSH T1E766F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.