General
- Target 2026-05-29_1a342b3b77fc2632ea5f9aad5bcd5c23_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos
- Size 2.5MB
- Sample260529-vxpnpsc14q
- SHA256 3a700d66ecc0df23a77fe1f82dca797b6ffa65f9b4126dc8d7d29a4ebf6d6452
- MD5 1a342b3b77fc2632ea5f9aad5bcd5c23
- SHA1 9285521a50ff02539bf6c55a9899c23adac8c674
- SHA512 c9929d83b17338288f168659ad743365399cc1105a2285d5e7516e52d147a6473c63f17381a00aec52aa6bbfa5a0c4fee8d1e59f6a8505c4641c720a4314058d
- SSDEEP 49152:4QzpCiRXGoR4Wf596+L+i4JFU4QK23CAILIvxuWjHk2P:42Ytk93LP4nU4QK235ILIvxV
- TLSH T120C56D603A88C13AD65217F1DD7DBB5F411CBEB90B6118E762D85B2D2FB04D2AE30927
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-05-29_1a342b3b77fc2632ea5f9aad5bcd5c23_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_1a342b3b77fc2632ea5f9aad5bcd5c23_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_1a342b3b77fc2632ea5f9aad5bcd5c23_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos
- Size 2.5MB
- SHA256 3a700d66ecc0df23a77fe1f82dca797b6ffa65f9b4126dc8d7d29a4ebf6d6452
- MD5 1a342b3b77fc2632ea5f9aad5bcd5c23
- SHA1 9285521a50ff02539bf6c55a9899c23adac8c674
- SHA512 c9929d83b17338288f168659ad743365399cc1105a2285d5e7516e52d147a6473c63f17381a00aec52aa6bbfa5a0c4fee8d1e59f6a8505c4641c720a4314058d
- SSDEEP 49152:4QzpCiRXGoR4Wf596+L+i4JFU4QK23CAILIvxuWjHk2P:42Ytk93LP4nU4QK235ILIvxV
- TLSH T120C56D603A88C13AD65217F1DD7DBB5F411CBEB90B6118E762D85B2D2FB04D2AE30927
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.