General
- Target 2026-07-31_2507496c2d302aa96c3995ec7668c816_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260801-afhtlstdkd
- SHA256 ce4aa38fef3db630f1c993757b6712ad24154ebff05e1d5dce7b8ee27efaed96
- MD5 2507496c2d302aa96c3995ec7668c816
- SHA1 9163c4b4e5f9f719c9e371f18f55014b066cb160
- SHA512 b87f262df37c2d4cec78442b6ae9999c175ec5c09b3726c7d4d92cbad4ac1307992e100362bbbdd9601b5cad3bf7ea1a05dab7b8c2f29ecf2b8731fa6a5af54e
- SSDEEP 98304:xtSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7qq/A:amgRSsdDujY7ReGA
- TLSH T1B246BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-31_2507496c2d302aa96c3995ec7668c816_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_2507496c2d302aa96c3995ec7668c816_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_2507496c2d302aa96c3995ec7668c816_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 ce4aa38fef3db630f1c993757b6712ad24154ebff05e1d5dce7b8ee27efaed96
- MD5 2507496c2d302aa96c3995ec7668c816
- SHA1 9163c4b4e5f9f719c9e371f18f55014b066cb160
- SHA512 b87f262df37c2d4cec78442b6ae9999c175ec5c09b3726c7d4d92cbad4ac1307992e100362bbbdd9601b5cad3bf7ea1a05dab7b8c2f29ecf2b8731fa6a5af54e
- SSDEEP 98304:xtSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7qq/A:amgRSsdDujY7ReGA
- TLSH T1B246BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.