General
- Target 2026-07-29_8cc3f63a152cddd5c4a60a278d7c303f_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260729-2efreaw1gt
- SHA256 db89c53d2f1f00f52ccd5a3bf32b759f84bc777e79238ef89def04f80f5cc8f5
- MD5 8cc3f63a152cddd5c4a60a278d7c303f
- SHA1 48c9eef650d1c5cfc6dc6852180a66277d8c00ae
- SHA512 8dc6de6b9f1b5bf8a79dea546051bcb61cac7aee057fbf9c3cf7b1e888b7a9fd8fa07744a7e07b80e7782d0bddb38da6593ca4c29f9fc416cfedbe4569cfea81
- SSDEEP 98304:+tSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7qq/X:lmgRSsdDujY7ReGX
- TLSH T12546BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-29_8cc3f63a152cddd5c4a60a278d7c303f_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_8cc3f63a152cddd5c4a60a278d7c303f_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_8cc3f63a152cddd5c4a60a278d7c303f_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 db89c53d2f1f00f52ccd5a3bf32b759f84bc777e79238ef89def04f80f5cc8f5
- MD5 8cc3f63a152cddd5c4a60a278d7c303f
- SHA1 48c9eef650d1c5cfc6dc6852180a66277d8c00ae
- SHA512 8dc6de6b9f1b5bf8a79dea546051bcb61cac7aee057fbf9c3cf7b1e888b7a9fd8fa07744a7e07b80e7782d0bddb38da6593ca4c29f9fc416cfedbe4569cfea81
- SSDEEP 98304:+tSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7qq/X:lmgRSsdDujY7ReGX
- TLSH T12546BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.