General
- Target 2026-09-03_c878b4a994bcbc65a2c8228d6190da91_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.3MB
- Sample260905-1d548sal2x
- SHA256 06db4d287975277aa313447bf71a3591cdd4af5feb289d7c5b53b3b7349538cd
- MD5 c878b4a994bcbc65a2c8228d6190da91
- SHA1 99b6a036d70bdc7db62720ce9048f0be797d2aec
- SHA512 ba05fa3fcd285ef6d0f05f55baeee6061784b9dbab9ac28e5d7fc1afe92c28ac2f3e961307d176cd54dabe63f9280a03c6cf431890c577571c80165d4c203933
- SSDEEP 98304:QnNlRG0ySJDLe2U8EqQ2mOLXb9Ouu9u9x4Q5ZtZva8:QnDnFe2U6zOu9x4QntZva8
- TLSH T13626C011FA8581B5F8B3017185285B7A8A7EED342778D4C3E79834594EB17C26B3F2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-03_c878b4a994bcbc65a2c8228d6190da91_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_c878b4a994bcbc65a2c8228d6190da91_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_c878b4a994bcbc65a2c8228d6190da91_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.3MB
- SHA256 06db4d287975277aa313447bf71a3591cdd4af5feb289d7c5b53b3b7349538cd
- MD5 c878b4a994bcbc65a2c8228d6190da91
- SHA1 99b6a036d70bdc7db62720ce9048f0be797d2aec
- SHA512 ba05fa3fcd285ef6d0f05f55baeee6061784b9dbab9ac28e5d7fc1afe92c28ac2f3e961307d176cd54dabe63f9280a03c6cf431890c577571c80165d4c203933
- SSDEEP 98304:QnNlRG0ySJDLe2U8EqQ2mOLXb9Ouu9u9x4Q5ZtZva8:QnDnFe2U6zOu9x4QntZva8
- TLSH T13626C011FA8581B5F8B3017185285B7A8A7EED342778D4C3E79834594EB17C26B3F2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.