General
- Target 2026-08-11_b00d2489d9e44108bc9c63de6a43ccf5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- Sample260811-c2hrvatekb
- SHA256 25ac8a08836444bcb2e9a2a760be90f0d475adaef51b7cac4fb39f8f03a4eea6
- MD5 b00d2489d9e44108bc9c63de6a43ccf5
- SHA1 1f73ab155cf3205bf5ee5f6e3f643b3a0b328578
- SHA512 7000f622cf65dad279fd7948d012a078204746a34bde565f0912f3817a8d054107d9b9e1e239c96a7df79dc59ea80551b243094b6fe32794cc5bbd57010786d3
- SSDEEP 98304:/Rrf1tCrwOybuqYBgWCis0wlSLfm1OCGxzF:/nthLYBI0wl6mbIzF
- TLSH T1AA36BE21BB42C1B2D99202F565BFAF7F483D6D34473098D3D3D1196E4831AC36A3A76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_b00d2489d9e44108bc9c63de6a43ccf5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_b00d2489d9e44108bc9c63de6a43ccf5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_b00d2489d9e44108bc9c63de6a43ccf5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.7MB
- SHA256 25ac8a08836444bcb2e9a2a760be90f0d475adaef51b7cac4fb39f8f03a4eea6
- MD5 b00d2489d9e44108bc9c63de6a43ccf5
- SHA1 1f73ab155cf3205bf5ee5f6e3f643b3a0b328578
- SHA512 7000f622cf65dad279fd7948d012a078204746a34bde565f0912f3817a8d054107d9b9e1e239c96a7df79dc59ea80551b243094b6fe32794cc5bbd57010786d3
- SSDEEP 98304:/Rrf1tCrwOybuqYBgWCis0wlSLfm1OCGxzF:/nthLYBI0wl6mbIzF
- TLSH T1AA36BE21BB42C1B2D99202F565BFAF7F483D6D34473098D3D3D1196E4831AC36A3A76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.