General
- Target 2026-09-05_8cf471243642feb985b6fed022d289af_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- Sample260907-qmqe2awsbz
- SHA256 d4b8351a27560b78d62bd29f17633381ae21069f45cba03913f8c0fe80aad747
- MD5 8cf471243642feb985b6fed022d289af
- SHA1 9188e3cae685c277e7dcabfd07a96038cec0655a
- SHA512 b997f2594b0256789cff890db0aa3a1f6bcf7980f01839cff35d5f9c77c212a6136c1ad68c46dda6ea3cb2b9617afadefb9d34c14d20206c512d533cb539fcd1
- SSDEEP 98304:g1+e0bOcjm1KyHugiq5TZtkq8P6hwGy+zha/Q:7emWVr8bGyk2Q
- TLSH T1A246BF11F78985B1F5A101B0597ABB7E583DBE284B3085D7A3D01D2A84312D37A3BB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-05_8cf471243642feb985b6fed022d289af_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_8cf471243642feb985b6fed022d289af_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_8cf471243642feb985b6fed022d289af_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.2MB
- SHA256 d4b8351a27560b78d62bd29f17633381ae21069f45cba03913f8c0fe80aad747
- MD5 8cf471243642feb985b6fed022d289af
- SHA1 9188e3cae685c277e7dcabfd07a96038cec0655a
- SHA512 b997f2594b0256789cff890db0aa3a1f6bcf7980f01839cff35d5f9c77c212a6136c1ad68c46dda6ea3cb2b9617afadefb9d34c14d20206c512d533cb539fcd1
- SSDEEP 98304:g1+e0bOcjm1KyHugiq5TZtkq8P6hwGy+zha/Q:7emWVr8bGyk2Q
- TLSH T1A246BF11F78985B1F5A101B0597ABB7E583DBE284B3085D7A3D01D2A84312D37A3BB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.