General
- Target 2026-10-28_57686fcb1b31272014cf6ab753d28687_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader
- Size 34.4MB
- Sample261030-esttvsav8m
- SHA256 0d8f9eafe732b21ddb3ced43ddc4b6a2df2de088e68346b7c994cb88a7291565
- MD5 57686fcb1b31272014cf6ab753d28687
- SHA1 07c52150af4eddac6e4b21f545b94cc75d081dac
- SHA512 cc9b9275bd9351e4dde39374f6087e623e3880b2784b4b072b2eefc464b2b9c00dc43d47f08bd16bd2448a815ee8ce1feefd0315c049939b9ea79c5cd1b5abcb
- SSDEEP 786432:VBEI+P2WeR1INMe8l1++1Uo2ZOoYfBtdm0H1gUb8EU05C:HEKXM2l1+b/sBtdVOUb8gC
- TLSH T17C873312FF878072E59B0530567DABBBC97AAF300735C5C39785392958309D29E3B36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-28_57686fcb1b31272014cf6ab753d28687_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win10v2004-20260911-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_57686fcb1b31272014cf6ab753d28687_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_ly.exe
Resource
win11ltsc2024-20260911-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_57686fcb1b31272014cf6ab753d28687_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader
- Size 34.4MB
- SHA256 0d8f9eafe732b21ddb3ced43ddc4b6a2df2de088e68346b7c994cb88a7291565
- MD5 57686fcb1b31272014cf6ab753d28687
- SHA1 07c52150af4eddac6e4b21f545b94cc75d081dac
- SHA512 cc9b9275bd9351e4dde39374f6087e623e3880b2784b4b072b2eefc464b2b9c00dc43d47f08bd16bd2448a815ee8ce1feefd0315c049939b9ea79c5cd1b5abcb
- SSDEEP 786432:VBEI+P2WeR1INMe8l1++1Uo2ZOoYfBtdm0H1gUb8EU05C:HEKXM2l1+b/sBtdVOUb8gC
- TLSH T17C873312FF878072E59B0530567DABBBC97AAF300735C5C39785392958309D29E3B36A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Windows Management Instrumentation
1Defense Evasion
Direct Volume Access
1Modify Registry
1Pre-OS Boot
1Bootkit
1