General
- Target 2026-08-09_ed50bdbd38b773ab393c9ab26b0d700d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 16.7MB
- Sample260809-jje2kabn5t
- SHA256 36e4dedf640037a728976eccbb7f42bc217036a82ef85f5399c6f8bc250a0f51
- MD5 ed50bdbd38b773ab393c9ab26b0d700d
- SHA1 81c7e9c0dcc7d3b6924c0122e7a8df359844809c
- SHA512 952939125e4aa4c10e8a698ccc5a3e4a7b267d31cbd649365ecbcb16e8660d27d574fd1d5f565c095e63cba567acac0a1dd18808428f791d4800963e90bff65d
- SSDEEP 393216:C/zyGmrSw0uV2Yu5v0p2HJpjfzCxZcWTBN4KBJ:EztmrSwxcvRpl70ZcEN4U
- TLSH T1CD071211BB5680B1D9DE017A11AFAB7F587D6F341B3484E7D7902AAD4C700C2BA3B35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_ed50bdbd38b773ab393c9ab26b0d700d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_ed50bdbd38b773ab393c9ab26b0d700d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ed50bdbd38b773ab393c9ab26b0d700d_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 16.7MB
- SHA256 36e4dedf640037a728976eccbb7f42bc217036a82ef85f5399c6f8bc250a0f51
- MD5 ed50bdbd38b773ab393c9ab26b0d700d
- SHA1 81c7e9c0dcc7d3b6924c0122e7a8df359844809c
- SHA512 952939125e4aa4c10e8a698ccc5a3e4a7b267d31cbd649365ecbcb16e8660d27d574fd1d5f565c095e63cba567acac0a1dd18808428f791d4800963e90bff65d
- SSDEEP 393216:C/zyGmrSw0uV2Yu5v0p2HJpjfzCxZcWTBN4KBJ:EztmrSwxcvRpl70ZcEN4U
- TLSH T1CD071211BB5680B1D9DE017A11AFAB7F587D6F341B3484E7D7902AAD4C700C2BA3B35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.