General
- Target 2026-08-03_d26cabd7b86c2f54cf5d7a850e6024db_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260804-lh8ctssvfz
- SHA256 1f100160077e4a2389827209f4eb7e09657289b7e4b991eb9e09bd58b3a24cee
- MD5 d26cabd7b86c2f54cf5d7a850e6024db
- SHA1 afe768d3bcc7f560493525296ecc943b5d764d5d
- SHA512 2e58f0aa43e3fc4726114494c92dcbd937fcee702b6e232477fc3c63d9045d3d6fe1ae4a78e8581a5c5614b9cbe63153805bd3484dfa366de0f729852ce98e13
- SSDEEP 98304:R9inBWTjP9RaZNn4Qb6EUkdjooM41i8pJsJZ/1:aojCm417pJsR1
- TLSH T16E46B001F685C5B1F5A101B0287AEB7A983DBE28473084D7A7D11E2A89316D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_d26cabd7b86c2f54cf5d7a850e6024db_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d26cabd7b86c2f54cf5d7a850e6024db_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d26cabd7b86c2f54cf5d7a850e6024db_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 1f100160077e4a2389827209f4eb7e09657289b7e4b991eb9e09bd58b3a24cee
- MD5 d26cabd7b86c2f54cf5d7a850e6024db
- SHA1 afe768d3bcc7f560493525296ecc943b5d764d5d
- SHA512 2e58f0aa43e3fc4726114494c92dcbd937fcee702b6e232477fc3c63d9045d3d6fe1ae4a78e8581a5c5614b9cbe63153805bd3484dfa366de0f729852ce98e13
- SSDEEP 98304:R9inBWTjP9RaZNn4Qb6EUkdjooM41i8pJsJZ/1:aojCm417pJsR1
- TLSH T16E46B001F685C5B1F5A101B0287AEB7A983DBE28473084D7A7D11E2A89316D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.