General
- Target 2026-08-01_182b0f932d9c67a37d8778d61467fb68_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260802-bmp2ya1fqf
- SHA256 4a758927f24e14898970d75cd73490561aaa0ced41b0e28a33482a9cbfb1c97d
- MD5 182b0f932d9c67a37d8778d61467fb68
- SHA1 a23057f32f624881e49d9e04df5953c4c83618f9
- SHA512 25b5e0cb739ecaef86a721017ae14ee79bc571f2e6269ea9e5d64b122e6f3cef9e76004ccd2685e55a4515754bd30f050812125c1a68ff9b49a1e8a712f2550f
- SSDEEP 98304:4tSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7aq/9:rmgRSsdDujY7RuG9
- TLSH T1D546BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-01_182b0f932d9c67a37d8778d61467fb68_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_182b0f932d9c67a37d8778d61467fb68_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_182b0f932d9c67a37d8778d61467fb68_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 4a758927f24e14898970d75cd73490561aaa0ced41b0e28a33482a9cbfb1c97d
- MD5 182b0f932d9c67a37d8778d61467fb68
- SHA1 a23057f32f624881e49d9e04df5953c4c83618f9
- SHA512 25b5e0cb739ecaef86a721017ae14ee79bc571f2e6269ea9e5d64b122e6f3cef9e76004ccd2685e55a4515754bd30f050812125c1a68ff9b49a1e8a712f2550f
- SSDEEP 98304:4tSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7aq/9:rmgRSsdDujY7RuG9
- TLSH T1D546BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.