General
- Target 2026-10-13_d8bba2689f03ccc73fe2ce42d3b6589d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
- Size 13.1MB
- Sample261014-e6grfsyvd1
- SHA256 191d330524fbe942f258db1d8303dda1516e6e6230f483ba524b064eb9659d35
- MD5 d8bba2689f03ccc73fe2ce42d3b6589d
- SHA1 f0a971c415f82f9a8abbaac89bd327c170647ef3
- SHA512 6d3eb35efa51243061924aa429ea7aaadd31725ea8cac4a866412023f24b55ca3fc691604d11fec2844605ed86d99f16b73e32ce1648051afc6dd011beb87eab
- SSDEEP 196608:zMzaF7YY7wsx8x5Pgk0h1z1b4YkHhVsH:z/MxF0h15OVsH
- TLSH T1A3D60C30EA009059F9C703B769FDA5ED42A86D71CBDD00D3A1856AF6D57E2F22736283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_d8bba2689f03ccc73fe2ce42d3b6589d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_revil_smoke-loader.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_d8bba2689f03ccc73fe2ce42d3b6589d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_revil_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_d8bba2689f03ccc73fe2ce42d3b6589d_amadey_coinminer_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
- Size 13.1MB
- SHA256 191d330524fbe942f258db1d8303dda1516e6e6230f483ba524b064eb9659d35
- MD5 d8bba2689f03ccc73fe2ce42d3b6589d
- SHA1 f0a971c415f82f9a8abbaac89bd327c170647ef3
- SHA512 6d3eb35efa51243061924aa429ea7aaadd31725ea8cac4a866412023f24b55ca3fc691604d11fec2844605ed86d99f16b73e32ce1648051afc6dd011beb87eab
- SSDEEP 196608:zMzaF7YY7wsx8x5Pgk0h1z1b4YkHhVsH:z/MxF0h15OVsH
- TLSH T1A3D60C30EA009059F9C703B769FDA5ED42A86D71CBDD00D3A1856AF6D57E2F22736283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.