General
- Target 2026-08-05_18a83c487d396cb6482641b8470c2bb1_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.8MB
- Sample260805-pgjvmaxbre
- SHA256 044e0f0b80d19181373fa5a4122e42cb39a64e0f0e2716cbc0bc11356aa250db
- MD5 18a83c487d396cb6482641b8470c2bb1
- SHA1 40e74cf1fbf976313016ebdecf225d854aa40e68
- SHA512 a09525afeb3c8a4427bb842cdc9f7f4b83c68696710d605d352ac8c14e48057e69d46a311edb3b3d4b5c0f4905988874eaca982dfc03e639516353307c6be151
- SSDEEP 49152:HvPvkhuOoqbL1eO5iCtqFy9waBFbUAjy/BiN99elg2FCCVThwQCPsw/vgEPlUzVD:HvPS04i+QewobUAjQiuFCCVNwhhvgc4D
- TLSH T18036BF45B601C175E9D202F851BFA77F462CAE240B35A8F387D019BB9C352C3593EB6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_18a83c487d396cb6482641b8470c2bb1_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_18a83c487d396cb6482641b8470c2bb1_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_18a83c487d396cb6482641b8470c2bb1_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.8MB
- SHA256 044e0f0b80d19181373fa5a4122e42cb39a64e0f0e2716cbc0bc11356aa250db
- MD5 18a83c487d396cb6482641b8470c2bb1
- SHA1 40e74cf1fbf976313016ebdecf225d854aa40e68
- SHA512 a09525afeb3c8a4427bb842cdc9f7f4b83c68696710d605d352ac8c14e48057e69d46a311edb3b3d4b5c0f4905988874eaca982dfc03e639516353307c6be151
- SSDEEP 49152:HvPvkhuOoqbL1eO5iCtqFy9waBFbUAjy/BiN99elg2FCCVThwQCPsw/vgEPlUzVD:HvPS04i+QewobUAjQiuFCCVNwhhvgc4D
- TLSH T18036BF45B601C175E9D202F851BFA77F462CAE240B35A8F387D019BB9C352C3593EB6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.