General
- Target 2026-08-05_834ca9e93aae0ca108bf1062ec1b4475_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260806-aerecsyfpb
- SHA256 101416a1075dd3894cfd01e72fdb440258f29da344ba8febd994344e747662b1
- MD5 834ca9e93aae0ca108bf1062ec1b4475
- SHA1 c14b30dab8da485a34a5042f565b2097fea1454a
- SHA512 ae257fe2adc2373182861f7b287e081a0fda0757c94ed9c366ad99c3d3be21743153e9cb5fec6949d9388e4818a5350d426762c7c790d65dd7ecc9b1ad04fafb
- SSDEEP 98304:utS/VIU7tRSoy6ThzqR4oza4SxpweHECY7tNba5/T:1uEY+pwevY7tsxT
- TLSH T13646B011F685C5B1F5D201B0197AEB7A983DAE28573088D7A7D02D2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-05_834ca9e93aae0ca108bf1062ec1b4475_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_834ca9e93aae0ca108bf1062ec1b4475_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_834ca9e93aae0ca108bf1062ec1b4475_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 101416a1075dd3894cfd01e72fdb440258f29da344ba8febd994344e747662b1
- MD5 834ca9e93aae0ca108bf1062ec1b4475
- SHA1 c14b30dab8da485a34a5042f565b2097fea1454a
- SHA512 ae257fe2adc2373182861f7b287e081a0fda0757c94ed9c366ad99c3d3be21743153e9cb5fec6949d9388e4818a5350d426762c7c790d65dd7ecc9b1ad04fafb
- SSDEEP 98304:utS/VIU7tRSoy6ThzqR4oza4SxpweHECY7tNba5/T:1uEY+pwevY7tsxT
- TLSH T13646B011F685C5B1F5D201B0197AEB7A983DAE28573088D7A7D02D2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.