General
- Target 2026-07-22_096b2b7a1b3594053a50b5c10bf0ac38_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 40.7MB
- Sample260723-cfywyafb83
- SHA256 ac7334ce9fb211e2b1372695c22c6cf8a4cf62c41d974debd40f7b31862812a0
- MD5 096b2b7a1b3594053a50b5c10bf0ac38
- SHA1 0ceab9808fcc67e35bfb3cabf08fbfb043eecebb
- SHA512 fba3d92c71d4ea439897b429adc414cb20a946c4c756555a43f60f86a7a4c232ac971a4418f07869f496f9fcd025cae2f1c2921add0fec2d59a486870040cd6a
- SSDEEP 786432:Oq7Ems0dXTyyp9dBZJq1RDOE/1RawmGIkoC6AColrmcgCJ8F0il/aVVf:OmsAuw5I8uRLFUAtgjFaVV
- TLSH T11E972312F641C072F59101B1226D9BBB493C6B319B3584C7E3C42EA96971AD37B3AF1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_096b2b7a1b3594053a50b5c10bf0ac38_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_096b2b7a1b3594053a50b5c10bf0ac38_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_096b2b7a1b3594053a50b5c10bf0ac38_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 40.7MB
- SHA256 ac7334ce9fb211e2b1372695c22c6cf8a4cf62c41d974debd40f7b31862812a0
- MD5 096b2b7a1b3594053a50b5c10bf0ac38
- SHA1 0ceab9808fcc67e35bfb3cabf08fbfb043eecebb
- SHA512 fba3d92c71d4ea439897b429adc414cb20a946c4c756555a43f60f86a7a4c232ac971a4418f07869f496f9fcd025cae2f1c2921add0fec2d59a486870040cd6a
- SSDEEP 786432:Oq7Ems0dXTyyp9dBZJq1RDOE/1RawmGIkoC6AColrmcgCJ8F0il/aVVf:OmsAuw5I8uRLFUAtgjFaVV
- TLSH T11E972312F641C072F59101B1226D9BBB493C6B319B3584C7E3C42EA96971AD37B3AF1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.