General
- Target 2026-04-18_56869bf0d1c40e9fa436fa3031c70754_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.5MB
- Sample260418-fa3jqagx8x
- SHA256 e8f4a9d44ceb644e704f37822b71698c431502b4b0b6e5d1af2b28a6753a7ce9
- MD5 56869bf0d1c40e9fa436fa3031c70754
- SHA1 42bc73e72fe3f201660399c6db46a0006e3913ed
- SHA512 2a0a7cb21298975311cd9c9617c664d20771ddf37c3ba13e5094bdd5ce5da7d1e8c3af19b1f612e4cbc789d9addbb7b921d6064cfb2c0c004b7f4ad2ec6e77b7
- SSDEEP 24576:yOiTgfZVvoWCw6hZS25AfJ0kSIjqlAPmHBRO6KiSA+ef/nA4YVyOpfgwGc4Rc:GTgT6XT+wzJhRUiSA5tYVywgwGc4Rc
- TLSH T1D6C55FF2E77AC031C1A00270E4EABB59C8E79DB037A601C35D44AEB524A9EF5553F53A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-04-18_56869bf0d1c40e9fa436fa3031c70754_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_56869bf0d1c40e9fa436fa3031c70754_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_56869bf0d1c40e9fa436fa3031c70754_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.5MB
- SHA256 e8f4a9d44ceb644e704f37822b71698c431502b4b0b6e5d1af2b28a6753a7ce9
- MD5 56869bf0d1c40e9fa436fa3031c70754
- SHA1 42bc73e72fe3f201660399c6db46a0006e3913ed
- SHA512 2a0a7cb21298975311cd9c9617c664d20771ddf37c3ba13e5094bdd5ce5da7d1e8c3af19b1f612e4cbc789d9addbb7b921d6064cfb2c0c004b7f4ad2ec6e77b7
- SSDEEP 24576:yOiTgfZVvoWCw6hZS25AfJ0kSIjqlAPmHBRO6KiSA+ef/nA4YVyOpfgwGc4Rc:GTgT6XT+wzJhRUiSA5tYVywgwGc4Rc
- TLSH T1D6C55FF2E77AC031C1A00270E4EABB59C8E79DB037A601C35D44AEB524A9EF5553F53A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.