General
- Target 2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader
- Size 8.5MB
- Sample260804-zz2hhazgrc
- SHA256 51b0403c5d3fca7909e6671bc6068fa7640439b9e6d3c39aa86d1bf6f6bf7e06
- MD5 16352156144b8043325dd571460c4f40
- SHA1 7ee2b5a5652cefa2de3c3daa35935abfe4636e84
- SHA512 bbae6c90b104c3ef48bb1ef5a64d85ee75dfc484e5cc30642df2b792331caa16502c09112fbabdf60f2070964e6f28b1a34400a93f49d29b96cbb659d7182675
- SSDEEP 98304:OvBmiF0Zp4XNQrr8jw3xob7jOQzfJzU275ZA:asaQruwqzfpU29ZA
- TLSH T107964A207B1DC522F58240FCD56F6AAB842DAE2007A1B0F3B2953DD5B5F4AF229356C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader
- Size 8.5MB
- SHA256 51b0403c5d3fca7909e6671bc6068fa7640439b9e6d3c39aa86d1bf6f6bf7e06
- MD5 16352156144b8043325dd571460c4f40
- SHA1 7ee2b5a5652cefa2de3c3daa35935abfe4636e84
- SHA512 bbae6c90b104c3ef48bb1ef5a64d85ee75dfc484e5cc30642df2b792331caa16502c09112fbabdf60f2070964e6f28b1a34400a93f49d29b96cbb659d7182675
- SSDEEP 98304:OvBmiF0Zp4XNQrr8jw3xob7jOQzfJzU275ZA:asaQruwqzfpU29ZA
- TLSH T107964A207B1DC522F58240FCD56F6AAB842DAE2007A1B0F3B2953DD5B5F4AF229356C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.