General
- Target 2026-08-10_71c68fffc8cb53a6ca2c545719d924f3_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 31.5MB
- Sample260810-fbwgss1epf
- SHA256 413905075dfe4a58b24657378c3aab533f7483dc613bd12a55f7f521f97428ac
- MD5 71c68fffc8cb53a6ca2c545719d924f3
- SHA1 fb428aefa17d238fb609dd398653a3f4b5f32001
- SHA512 703aafccfe1782338ccc562f97c202eb80c7d8919f7fae423798888a39ee10301baeeb43a9fb0c697cda257ab51e9f17dbc3933b2511d246364af4c822c263c5
- SSDEEP 786432:Zx3uXedw9HFoX5DRwXmW3v6+qR/n0jLgMKIzJ:ZUXeq9HyXHI6+q1n0jsMKIt
- TLSH T1F6772352FB4681B1F592417461BBAB7B8C3C59249B3194C3D7C01A7988306D27B3FBBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_71c68fffc8cb53a6ca2c545719d924f3_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_71c68fffc8cb53a6ca2c545719d924f3_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_71c68fffc8cb53a6ca2c545719d924f3_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 31.5MB
- SHA256 413905075dfe4a58b24657378c3aab533f7483dc613bd12a55f7f521f97428ac
- MD5 71c68fffc8cb53a6ca2c545719d924f3
- SHA1 fb428aefa17d238fb609dd398653a3f4b5f32001
- SHA512 703aafccfe1782338ccc562f97c202eb80c7d8919f7fae423798888a39ee10301baeeb43a9fb0c697cda257ab51e9f17dbc3933b2511d246364af4c822c263c5
- SSDEEP 786432:Zx3uXedw9HFoX5DRwXmW3v6+qR/n0jLgMKIzJ:ZUXeq9HyXHI6+q1n0jsMKIt
- TLSH T1F6772352FB4681B1F592417461BBAB7B8C3C59249B3194C3D7C01A7988306D27B3FBBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.