General
- Target 2026-10-01_2ef6bb298e70642b098a97c734763e47_amadey_coinminer_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 3.9MB
- Sample261002-vx4sma1ejd
- SHA256 f39720be05f285c7c4addc52938e06f32f44316827278c2689adf634eaae8338
- MD5 2ef6bb298e70642b098a97c734763e47
- SHA1 dfd35b388db534dfa4ea5c91dab5bfca95d20db3
- SHA512 aca51e624759f86536493349e45eeec9f78aa8cf85d35fdbb7315a59863f0d33da6c58562c2375491eb2f8988b4aae1f73a20e4c3b2ff58d8c8c9ecd27a62d3e
- SSDEEP 98304:d57KJIw7A24gD2lIIvn5P7NoyRZIelWYTCbOMUB2:rdwIkqP5P7NosyejHK
- TLSH T1EF16E022BA86C132D6A641B05D7DAF3E547DBA310B3581CBB3C41D2EDD706D25A3938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-01_2ef6bb298e70642b098a97c734763e47_amadey_coinminer_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_2ef6bb298e70642b098a97c734763e47_amadey_coinminer_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_2ef6bb298e70642b098a97c734763e47_amadey_coinminer_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 3.9MB
- SHA256 f39720be05f285c7c4addc52938e06f32f44316827278c2689adf634eaae8338
- MD5 2ef6bb298e70642b098a97c734763e47
- SHA1 dfd35b388db534dfa4ea5c91dab5bfca95d20db3
- SHA512 aca51e624759f86536493349e45eeec9f78aa8cf85d35fdbb7315a59863f0d33da6c58562c2375491eb2f8988b4aae1f73a20e4c3b2ff58d8c8c9ecd27a62d3e
- SSDEEP 98304:d57KJIw7A24gD2lIIvn5P7NoyRZIelWYTCbOMUB2:rdwIkqP5P7NosyejHK
- TLSH T1EF16E022BA86C132D6A641B05D7DAF3E547DBA310B3581CBB3C41D2EDD706D25A3938B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Direct Volume Access
1Modify Registry
3Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1