General
- Target 2026-08-22_09f94e00620bca2e787d5c9d7e7706c6_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.3MB
- Sample260823-p63n2aac58
- SHA256 ff1711fb1b90764ac6ca1179d507bf16caa7cb7caeae04612da2b6a145004e92
- MD5 09f94e00620bca2e787d5c9d7e7706c6
- SHA1 4a5d671428a0b1a3ea07bbcb311248fed06bd4e1
- SHA512 325dc3bdff711bd01716359e324b9a026694e240c10e8f0cdb8309b2ac5527d5c9abf2f020e5ec817ef9074472c5a864ebe56cf8862da83081a52dd659d1096b
- SSDEEP 98304:vnNlRG0ySJDLe2U8EqQ2mOLXb9Ouu9u9x4Q5ZtZvaeG:vnDnFe2U6zOu9x4QntZvaeG
- TLSH T14426C011FA8581B5F8B3017185285B7A8A7EED342778D4C3E79834694EB17C16B3F2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-22_09f94e00620bca2e787d5c9d7e7706c6_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_09f94e00620bca2e787d5c9d7e7706c6_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_09f94e00620bca2e787d5c9d7e7706c6_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.3MB
- SHA256 ff1711fb1b90764ac6ca1179d507bf16caa7cb7caeae04612da2b6a145004e92
- MD5 09f94e00620bca2e787d5c9d7e7706c6
- SHA1 4a5d671428a0b1a3ea07bbcb311248fed06bd4e1
- SHA512 325dc3bdff711bd01716359e324b9a026694e240c10e8f0cdb8309b2ac5527d5c9abf2f020e5ec817ef9074472c5a864ebe56cf8862da83081a52dd659d1096b
- SSDEEP 98304:vnNlRG0ySJDLe2U8EqQ2mOLXb9Ouu9u9x4Q5ZtZvaeG:vnDnFe2U6zOu9x4QntZvaeG
- TLSH T14426C011FA8581B5F8B3017185285B7A8A7EED342778D4C3E79834694EB17C16B3F2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.