General
- Target 2026-10-22_4cecfad09ccc227f435830ef2367d0cd_amadey_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample261024-q628yaas91
- SHA256 a975846af56fd278744ba085adda96aecfca75caac39bce15de9b258faeaadf9
- MD5 4cecfad09ccc227f435830ef2367d0cd
- SHA1 59cf53c4631d98cb0f5bf392336e1b620c3db0a7
- SHA512 1ae376793924c5a53de16461231cc8c98b40325ed45fdaf7aa7b8d87879a76a822f50ab84b02479931a493a593ca24c5116038b55fadee829c76967abafc15b3
- SSDEEP 49152:jFx+wMpMb02sIMpGC+A3sb8OVW+6lwcW/Gfksg1zf+NA:jFxmMoCMju6Zy1zgA
- TLSH T13AB5C0257B518171E1B1017055BAAF72D97D7D38AF308ACBA3901B1A89302D2FD36F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_4cecfad09ccc227f435830ef2367d0cd_amadey_coinminer_elex_glassworm_luca-stealer_medusalocke.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_4cecfad09ccc227f435830ef2367d0cd_amadey_coinminer_elex_glassworm_luca-stealer_medusalocke.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_4cecfad09ccc227f435830ef2367d0cd_amadey_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 a975846af56fd278744ba085adda96aecfca75caac39bce15de9b258faeaadf9
- MD5 4cecfad09ccc227f435830ef2367d0cd
- SHA1 59cf53c4631d98cb0f5bf392336e1b620c3db0a7
- SHA512 1ae376793924c5a53de16461231cc8c98b40325ed45fdaf7aa7b8d87879a76a822f50ab84b02479931a493a593ca24c5116038b55fadee829c76967abafc15b3
- SSDEEP 49152:jFx+wMpMb02sIMpGC+A3sb8OVW+6lwcW/Gfksg1zf+NA:jFxmMoCMju6Zy1zgA
- TLSH T13AB5C0257B518171E1B1017055BAAF72D97D7D38AF308ACBA3901B1A89302D2FD36F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory