General
- Target 2026-08-01_aa2ee316dc860fb977d83e896f6d8976_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- Sample260801-da8dvswdkb
- SHA256 df7ef1ec5f78861ce55bc5e61d2f02a3aad9c2a384572459d61975617d02e4a1
- MD5 aa2ee316dc860fb977d83e896f6d8976
- SHA1 ae241d778139b8323eb72913556622d3848fa549
- SHA512 e99be5ec703fb39b270111375d05d0c7c39216324a02f81c84104f8a0f48c860ff23bb965931466288ce6ce5e4e083e81c97247ca144d4443c1a03d8e4e240fb
- SSDEEP 98304:lP3oXw+Dvo7rXrc21af0H2AjwAvBJMc9CGG0:l2wWWw21acjwALMzM
- TLSH T16F36BE21BF86C1B2E99201F565BEAB7F483C6D34473484C397E01E6F88316D2663E75A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_aa2ee316dc860fb977d83e896f6d8976_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_aa2ee316dc860fb977d83e896f6d8976_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_aa2ee316dc860fb977d83e896f6d8976_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- SHA256 df7ef1ec5f78861ce55bc5e61d2f02a3aad9c2a384572459d61975617d02e4a1
- MD5 aa2ee316dc860fb977d83e896f6d8976
- SHA1 ae241d778139b8323eb72913556622d3848fa549
- SHA512 e99be5ec703fb39b270111375d05d0c7c39216324a02f81c84104f8a0f48c860ff23bb965931466288ce6ce5e4e083e81c97247ca144d4443c1a03d8e4e240fb
- SSDEEP 98304:lP3oXw+Dvo7rXrc21af0H2AjwAvBJMc9CGG0:l2wWWw21acjwALMzM
- TLSH T16F36BE21BF86C1B2E99201F565BEAB7F483C6D34473484C397E01E6F88316D2663E75A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.