General
- Target 2026-09-03_92bab122b32b42a17d422a3cf360c53d_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil
- Size 30.5MB
- Sample260905-2n85baar41
- SHA256 8352ffc46d41dfe18a94c21ebc3389826cd7332e698c3545bce58aac5885d96e
- MD5 92bab122b32b42a17d422a3cf360c53d
- SHA1 33a9c904a487e6d234422974e40344a652885d02
- SHA512 297df52df065578ed0245785d119f80ecefcb288ef9793534e10bdcc4cd3263aeab522b74af3219c2edab6cd128aaf208798d4145aa1a00e63f1fe413bc1031e
- SSDEEP 786432:LMb8wtUrYyqT+OSnxti/rrubGqNggsc0BeG:LGlLyqi5binubGqNABR
- TLSH T11E6723217F42C571EE81017696BDAB7F093C9F300B6954D3D3983E6A4D705C22B3AA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-03_92bab122b32b42a17d422a3cf360c53d_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_92bab122b32b42a17d422a3cf360c53d_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_92bab122b32b42a17d422a3cf360c53d_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil
- Size 30.5MB
- SHA256 8352ffc46d41dfe18a94c21ebc3389826cd7332e698c3545bce58aac5885d96e
- MD5 92bab122b32b42a17d422a3cf360c53d
- SHA1 33a9c904a487e6d234422974e40344a652885d02
- SHA512 297df52df065578ed0245785d119f80ecefcb288ef9793534e10bdcc4cd3263aeab522b74af3219c2edab6cd128aaf208798d4145aa1a00e63f1fe413bc1031e
- SSDEEP 786432:LMb8wtUrYyqT+OSnxti/rrubGqNggsc0BeG:LGlLyqi5binubGqNABR
- TLSH T11E6723217F42C571EE81017696BDAB7F093C9F300B6954D3D3983E6A4D705C22B3AA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.