General
- Target 2026-08-17_938cbf95f9a378920e71530a64ec17e5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 32.8MB
- Sample260817-cftl8a1fjc
- SHA256 6d69ef80886696ddaea8e817e0e17f9c9eefb31275d2e9ae6aa85c137737f4dc
- MD5 938cbf95f9a378920e71530a64ec17e5
- SHA1 015b4e099bb81ed58a3c976cc3526ee98980aab5
- SHA512 750d815cf9ed3dd31fe13acd6af8a56dba35a87674a493d8c8d36c7a6e9f1e8cca7cebb67d14073a735dd68cb03cf8d515585edc1c890710a4d1e25df24d0766
- SSDEEP 786432:QaDSpJwWpJ2VllaiLX7lY0gvGKh4y1/TaSbft/eKkHRv:ewKkPlJLX7lY0/y1/eSr9sRv
- TLSH T1A1772321BB42C072D5EE01B115ABA77A08796F34572488E7E3E12A6E4D715D37F3B30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_938cbf95f9a378920e71530a64ec17e5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_938cbf95f9a378920e71530a64ec17e5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_938cbf95f9a378920e71530a64ec17e5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_remcos_revil
- Size 32.8MB
- SHA256 6d69ef80886696ddaea8e817e0e17f9c9eefb31275d2e9ae6aa85c137737f4dc
- MD5 938cbf95f9a378920e71530a64ec17e5
- SHA1 015b4e099bb81ed58a3c976cc3526ee98980aab5
- SHA512 750d815cf9ed3dd31fe13acd6af8a56dba35a87674a493d8c8d36c7a6e9f1e8cca7cebb67d14073a735dd68cb03cf8d515585edc1c890710a4d1e25df24d0766
- SSDEEP 786432:QaDSpJwWpJ2VllaiLX7lY0gvGKh4y1/TaSbft/eKkHRv:ewKkPlJLX7lY0/y1/eSr9sRv
- TLSH T1A1772321BB42C072D5EE01B115ABA77A08796F34572488E7E3E12A6E4D715D37F3B30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.