General
- Target 2026-08-25_b9134a055d311b3e51745a44573de3ff_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260826-pbxjjadb66
- SHA256 22751fe17d94bcaaa01fd4e6232b26ab6934e7d5713b9efea39b73f1938734b0
- MD5 b9134a055d311b3e51745a44573de3ff
- SHA1 9f3d1e4cd15f54cc4cb52ca1804cda87f6dc1763
- SHA512 5d0cdf4a314113255d02a943d0bc8bbd65fdbc829235cd18829c138302f95b726cbeb62ce1d37910fc2c05d0d332e868f0a1decd99f9185afae853ced9369bea
- SSDEEP 98304:llufqmLUsV/dgAHL2Dir7a0MBrOA7YCsqW/KO:eHnWprOuYC76T
- TLSH T14746BF41FB8585B1F59201B0697AEF7A983DAE29573484C7A3D01D2A88302D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_b9134a055d311b3e51745a44573de3ff_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_b9134a055d311b3e51745a44573de3ff_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_b9134a055d311b3e51745a44573de3ff_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 22751fe17d94bcaaa01fd4e6232b26ab6934e7d5713b9efea39b73f1938734b0
- MD5 b9134a055d311b3e51745a44573de3ff
- SHA1 9f3d1e4cd15f54cc4cb52ca1804cda87f6dc1763
- SHA512 5d0cdf4a314113255d02a943d0bc8bbd65fdbc829235cd18829c138302f95b726cbeb62ce1d37910fc2c05d0d332e868f0a1decd99f9185afae853ced9369bea
- SSDEEP 98304:llufqmLUsV/dgAHL2Dir7a0MBrOA7YCsqW/KO:eHnWprOuYC76T
- TLSH T14746BF41FB8585B1F59201B0697AEF7A983DAE29573484C7A3D01D2A88302D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.