General
- Target 2026-08-09_aecb75e3bfeb3d3cea3a2a94bffb24c2_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader
- Size 8.1MB
- Sample260809-wxr99stbrf
- SHA256 7f0fa465bbd7e7988cced8c8c637e5307238080731784692bf9c3cad0309a673
- MD5 aecb75e3bfeb3d3cea3a2a94bffb24c2
- SHA1 3d8e63785768079fb6cbb68d491ba716b0be9830
- SHA512 64713bc255f31d3bd32d3b1852cf2d7ce3276786449b2eb9500dfeffd043956c4b0d2a31596e1dd96a0694359a731dd12a9796976e04daa44b08f44956df01c8
- SSDEEP 98304:iv7Mf1yD9+NwwTw6YMwNkyucN0eNSGSUhEd:uW1yR+SwTwBd30GSUm
- TLSH T197865B207B1DC922F58140FDE52B7A6B845AAE2007A0B0F3F2953DD975F4AF225396C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_aecb75e3bfeb3d3cea3a2a94bffb24c2_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_aecb75e3bfeb3d3cea3a2a94bffb24c2_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_aecb75e3bfeb3d3cea3a2a94bffb24c2_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader
- Size 8.1MB
- SHA256 7f0fa465bbd7e7988cced8c8c637e5307238080731784692bf9c3cad0309a673
- MD5 aecb75e3bfeb3d3cea3a2a94bffb24c2
- SHA1 3d8e63785768079fb6cbb68d491ba716b0be9830
- SHA512 64713bc255f31d3bd32d3b1852cf2d7ce3276786449b2eb9500dfeffd043956c4b0d2a31596e1dd96a0694359a731dd12a9796976e04daa44b08f44956df01c8
- SSDEEP 98304:iv7Mf1yD9+NwwTw6YMwNkyucN0eNSGSUhEd:uW1yR+SwTwBd30GSUm
- TLSH T197865B207B1DC922F58140FDE52B7A6B845AAE2007A0B0F3F2953DD975F4AF225396C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.