General
- Target 2026-08-15_0aa2e1c034bcd8c75e567a284a2e0ab4_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.4MB
- Sample260815-cdhf6swhpd
- SHA256 86640ae71b04e492a2f4560be9309ecf554b0dbbd93d2d7119ccc4cce1114702
- MD5 0aa2e1c034bcd8c75e567a284a2e0ab4
- SHA1 9f2e17c96d9411936bb838415eedd4084ad1e2aa
- SHA512 29ef6fe188f497f95156d518aa582e13fbb48b311e1df33ef1e1d13623bb3649da1eab0d060ff69705ee20a25ab7c0eeb050c609a590298e7657ea90d9078e2e
- SSDEEP 98304:P5LvO0gaQq9lTobppTjw3cpLevww86s2SKXr2Wba:PVOvaQe5mLkw52lr2ia
- TLSH T1D126BE92FB42C1B2D99201B425AEE7BE083E7D344B24D4C3E7D01E6A49715C2773E7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_0aa2e1c034bcd8c75e567a284a2e0ab4_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-s.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_0aa2e1c034bcd8c75e567a284a2e0ab4_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-s.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_0aa2e1c034bcd8c75e567a284a2e0ab4_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 4.4MB
- SHA256 86640ae71b04e492a2f4560be9309ecf554b0dbbd93d2d7119ccc4cce1114702
- MD5 0aa2e1c034bcd8c75e567a284a2e0ab4
- SHA1 9f2e17c96d9411936bb838415eedd4084ad1e2aa
- SHA512 29ef6fe188f497f95156d518aa582e13fbb48b311e1df33ef1e1d13623bb3649da1eab0d060ff69705ee20a25ab7c0eeb050c609a590298e7657ea90d9078e2e
- SSDEEP 98304:P5LvO0gaQq9lTobppTjw3cpLevww86s2SKXr2Wba:PVOvaQe5mLkw52lr2ia
- TLSH T1D126BE92FB42C1B2D99201B425AEE7BE083E7D344B24D4C3E7D01E6A49715C2773E7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.