General
- Target 2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.5MB
- Sample260808-ms2tgadq41
- SHA256 06e8af56fb9b687a40304ff9919f21e198e1a367ddf80b9b65a1762fbdfdecc8
- MD5 c0f825bc2306cb0e797234ac089cd9c3
- SHA1 ac2d71ac29c29afb00308461b339f0ef5e69745d
- SHA512 3023e20f17ca23a13788760d2e24f31bdfa8b567ca5d4b3a15fa8366f11a83c8321a51a6f7dcc79707b02f5e8155534f50cc6320694035c7794d1cd48fa924f5
- SSDEEP 98304:9hHnU3yKnoeAbNPus3xc6uNtqZjS+9xsfVVn+w2C2bRjboL6H:9hU3EFxk+wB2bRo6H
- TLSH T19326BE51BB82C4B6D99201F465BFAB7E083D6E384B34D4C3E7D11E7A48704C3663A76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_ly.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c0f825bc2306cb0e797234ac089cd9c3_amadey_coinminer_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.5MB
- SHA256 06e8af56fb9b687a40304ff9919f21e198e1a367ddf80b9b65a1762fbdfdecc8
- MD5 c0f825bc2306cb0e797234ac089cd9c3
- SHA1 ac2d71ac29c29afb00308461b339f0ef5e69745d
- SHA512 3023e20f17ca23a13788760d2e24f31bdfa8b567ca5d4b3a15fa8366f11a83c8321a51a6f7dcc79707b02f5e8155534f50cc6320694035c7794d1cd48fa924f5
- SSDEEP 98304:9hHnU3yKnoeAbNPus3xc6uNtqZjS+9xsfVVn+w2C2bRjboL6H:9hU3EFxk+wB2bRo6H
- TLSH T19326BE51BB82C4B6D99201F465BFAB7E083D6E384B34D4C3E7D11E7A48704C3663A76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.