General
- Target 2026-08-03_e66c09a43424a707507d5fd26f0619fc_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260804-k6ke8swfka
- SHA256 926cb1ec6b23287dce2840de98811b7e6063675a6b97d9b5466a8b4a1eef2988
- MD5 e66c09a43424a707507d5fd26f0619fc
- SHA1 0f94ed49046453e02432177eb832bec72c1e451c
- SHA512 101de3b09532cff965a98a56fca6733b2bfb0aa89ec1bd06a5b5cdf811494932e4ba523cb3bd9ebccfcfacc77686fea510a483ce9c8eb39af81d5992e251b091
- SSDEEP 98304:dtSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7qq/x:OmgRSsdDujY7ReGx
- TLSH T18346BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_e66c09a43424a707507d5fd26f0619fc_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e66c09a43424a707507d5fd26f0619fc_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e66c09a43424a707507d5fd26f0619fc_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 926cb1ec6b23287dce2840de98811b7e6063675a6b97d9b5466a8b4a1eef2988
- MD5 e66c09a43424a707507d5fd26f0619fc
- SHA1 0f94ed49046453e02432177eb832bec72c1e451c
- SHA512 101de3b09532cff965a98a56fca6733b2bfb0aa89ec1bd06a5b5cdf811494932e4ba523cb3bd9ebccfcfacc77686fea510a483ce9c8eb39af81d5992e251b091
- SSDEEP 98304:dtSmIpRRoT9bdCZl5C7SvvyyY4BDt8jAmY7R7qq/x:OmgRSsdDujY7ReGx
- TLSH T18346BF11F685C5B1F5D201B0297AAB7A943DBE28573088C7A7D11E2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1