General
- Target 2026-09-13_bfbd891b7b86ccd57233ebd52a485c4d_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_revil
- Size 4.2MB
- Sample260913-mvndvsfn7s
- SHA256 84e7fdb0504879605db9886f080f10a05af4a857077d3823e5afe7b366c33ebb
- MD5 bfbd891b7b86ccd57233ebd52a485c4d
- SHA1 187d7b38da287c9d435bacbce01b766aa8517b66
- SHA512 282ec62d1984f3f387fc8db17cbbb200f98a8fd050e8f5f61723390437956d28a441c70c2bf8ef834f9cb5f1f207d6550c480bb5afedf17c4aca0e061ce1c14a
- SSDEEP 98304:6xLEnkbATcX8JaNIR5wjfGWwPl7wXJhEDglbx:6SnOAmWR50f67wPWgll
- TLSH T14126BE11FA4181F2E9D201F9A5AEAB7F083D5E344734C8D39BD009BA49315D26B3E7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-13_bfbd891b7b86ccd57233ebd52a485c4d_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-s.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_bfbd891b7b86ccd57233ebd52a485c4d_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-s.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_bfbd891b7b86ccd57233ebd52a485c4d_amadey_coinminer_darkgate_elex_glassworm_lightspy_luca-stealer_lynx_medusalocker_njrat_revil
- Size 4.2MB
- SHA256 84e7fdb0504879605db9886f080f10a05af4a857077d3823e5afe7b366c33ebb
- MD5 bfbd891b7b86ccd57233ebd52a485c4d
- SHA1 187d7b38da287c9d435bacbce01b766aa8517b66
- SHA512 282ec62d1984f3f387fc8db17cbbb200f98a8fd050e8f5f61723390437956d28a441c70c2bf8ef834f9cb5f1f207d6550c480bb5afedf17c4aca0e061ce1c14a
- SSDEEP 98304:6xLEnkbATcX8JaNIR5wjfGWwPl7wXJhEDglbx:6SnOAmWR50f67wPWgll
- TLSH T14126BE11FA4181F2E9D201F9A5AEAB7F083D5E344734C8D39BD009BA49315D26B3E7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.