General
- Target 2026-08-15_3d6dfc876da8ee72a1b0ebaed5951ca9_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_mespinoza_njrat_revil
- Size 3.9MB
- Sample260815-pncd5axsc1
- SHA256 d79054c43c3d0cce281710342032f49d37fc5c2311492ca6c541605450c97d3a
- MD5 3d6dfc876da8ee72a1b0ebaed5951ca9
- SHA1 99dcbc9e9b45852f4f4e55a52d57bdce7a2ef9e6
- SHA512 6dab2885b18f3e812aa9042feae8eed6e669cfd6a3c96728288fb1983a1b10084d7c5cc6842fd57cb94aa817c1d30419ce396ac22c913d91e011420c539e5817
- SSDEEP 98304:xaL3lNxPvYJFLyPZjaJIUqiwDd8JD07sS4uNeVvwKf:dzyBjPBm07sONeVvD
- TLSH T1CE16BF13F9808475E47301369A69ABB59DBEAD303379D4C36BA538684F704D1AB3E363
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-15_3d6dfc876da8ee72a1b0ebaed5951ca9_coinminer_darkgate_elex_glassworm_hijackloader_luca-stea.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_3d6dfc876da8ee72a1b0ebaed5951ca9_coinminer_darkgate_elex_glassworm_hijackloader_luca-stea.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_3d6dfc876da8ee72a1b0ebaed5951ca9_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_mespinoza_njrat_revil
- Size 3.9MB
- SHA256 d79054c43c3d0cce281710342032f49d37fc5c2311492ca6c541605450c97d3a
- MD5 3d6dfc876da8ee72a1b0ebaed5951ca9
- SHA1 99dcbc9e9b45852f4f4e55a52d57bdce7a2ef9e6
- SHA512 6dab2885b18f3e812aa9042feae8eed6e669cfd6a3c96728288fb1983a1b10084d7c5cc6842fd57cb94aa817c1d30419ce396ac22c913d91e011420c539e5817
- SSDEEP 98304:xaL3lNxPvYJFLyPZjaJIUqiwDd8JD07sS4uNeVvwKf:dzyBjPBm07sONeVvD
- TLSH T1CE16BF13F9808475E47301369A69ABB59DBEAD303379D4C36BA538684F704D1AB3E363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Downloads MZ/PE file
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.