General
- Target 2026-07-17_738904a1429318121790d8710a1d0c1c_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- Sample260717-2d9cbsfx9r
- SHA256 9306990e05d0dc8cd089291c3e3bd180eb3c6d22d2eecbe387f34076fe0fcf67
- MD5 738904a1429318121790d8710a1d0c1c
- SHA1 fcf9f144325d92b76fdf25948191a485c3e63fbb
- SHA512 d95d485c88b14dce07482cf3383decb7a2d2cd6aa83534beb6f5a2326a6169d6a61f4d119c6f323b4da502f7210da346413566ddd5d813a1bbbda36803712085
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0WwR:FyIvEeUFhlUMFFjObybMsE
- TLSH T1FA66F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_738904a1429318121790d8710a1d0c1c_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_738904a1429318121790d8710a1d0c1c_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_738904a1429318121790d8710a1d0c1c_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil
- Size 6.8MB
- SHA256 9306990e05d0dc8cd089291c3e3bd180eb3c6d22d2eecbe387f34076fe0fcf67
- MD5 738904a1429318121790d8710a1d0c1c
- SHA1 fcf9f144325d92b76fdf25948191a485c3e63fbb
- SHA512 d95d485c88b14dce07482cf3383decb7a2d2cd6aa83534beb6f5a2326a6169d6a61f4d119c6f323b4da502f7210da346413566ddd5d813a1bbbda36803712085
- SSDEEP 196608:Eo9pwI0xAEF4UFhlUM8P8wceYdObywORMs0WwR:FyIvEeUFhlUMFFjObybMsE
- TLSH T1FA66F112BE80C432E5A201729A7D7F694AFDFA311729C5C3ABD9099D4D309D2B739327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.