General
- Target 2026-05-04_a5c67dd0ff4d1ea104d306af4a8dbfc9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
- Size 8.5MB
- Sample260504-jllbcses7w
- SHA256 b422b1a5e4e4a42e876a845e1ef5c5b13fa0daa7202e38bb77649a980d97de41
- MD5 a5c67dd0ff4d1ea104d306af4a8dbfc9
- SHA1 29e67c0b60c6a755b8e809d8136b0a3138afc919
- SHA512 7eb4997a28ebd5840030b2a091783f510c8e5a3d14057ddb4a0fe8dca4ed5f0b7a29a9740c0287bc34c813d60db01634b5a5e45da8d8320ffdb913681fc1d12c
- SSDEEP 196608:0vmfQgwDYQHuZUUvlcEw3DePCcxBXkCpxJ4SEo:/PQOyelcEw3DePttRxJ4M
- TLSH T10E9622507090D237C5A702B29ABDBF4E526A3F747B2680DF57D47B5929B18C30B3292B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-05-04_a5c67dd0ff4d1ea104d306af4a8dbfc9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_a5c67dd0ff4d1ea104d306af4a8dbfc9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_a5c67dd0ff4d1ea104d306af4a8dbfc9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
- Size 8.5MB
- SHA256 b422b1a5e4e4a42e876a845e1ef5c5b13fa0daa7202e38bb77649a980d97de41
- MD5 a5c67dd0ff4d1ea104d306af4a8dbfc9
- SHA1 29e67c0b60c6a755b8e809d8136b0a3138afc919
- SHA512 7eb4997a28ebd5840030b2a091783f510c8e5a3d14057ddb4a0fe8dca4ed5f0b7a29a9740c0287bc34c813d60db01634b5a5e45da8d8320ffdb913681fc1d12c
- SSDEEP 196608:0vmfQgwDYQHuZUUvlcEw3DePCcxBXkCpxJ4SEo:/PQOyelcEw3DePttRxJ4M
- TLSH T10E9622507090D237C5A702B29ABDBF4E526A3F747B2680DF57D47B5929B18C30B3292B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.