General
- Target 2026-06-27_7656b6afea642eb20392787a1c3a6844_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_njrat_remcos_revil
- Size 3.4MB
- Sample260629-gq5vfset9v
- SHA256 3b979e62eba3b7bdae067d58e996c734945cfdc9499f8c3eb898b69981d270f7
- MD5 7656b6afea642eb20392787a1c3a6844
- SHA1 f538db2db5f39463ea8c02ba3b04f14e85eb2e32
- SHA512 2f5c909bdf9811d8a9380ab0796a21362b9732add22cc94c3628f6f65efe297b5968a4e8dcbedafc790cb18eeb46512bb6f5f51579b8be1f1c079ba06c86e583
- SSDEEP 98304:O4jCQ8NqbdbF/O1EVHgFukMIaA5fbGoLu2ZKSowvnHODP1mkb:RrRF/O1EVHgFukMIaA5fbGoLu2Z3ow/q
- TLSH T1D8F5AE12B601C072E49200F6957AABF68C2CAD351B3454C7AFD87F6979311D36A36F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-27_7656b6afea642eb20392787a1c3a6844_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_7656b6afea642eb20392787a1c3a6844_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_7656b6afea642eb20392787a1c3a6844_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_njrat_remcos_revil
- Size 3.4MB
- SHA256 3b979e62eba3b7bdae067d58e996c734945cfdc9499f8c3eb898b69981d270f7
- MD5 7656b6afea642eb20392787a1c3a6844
- SHA1 f538db2db5f39463ea8c02ba3b04f14e85eb2e32
- SHA512 2f5c909bdf9811d8a9380ab0796a21362b9732add22cc94c3628f6f65efe297b5968a4e8dcbedafc790cb18eeb46512bb6f5f51579b8be1f1c079ba06c86e583
- SSDEEP 98304:O4jCQ8NqbdbF/O1EVHgFukMIaA5fbGoLu2ZKSowvnHODP1mkb:RrRF/O1EVHgFukMIaA5fbGoLu2Z3ow/q
- TLSH T1D8F5AE12B601C072E49200F6957AABF68C2CAD351B3454C7AFD87F6979311D36A36F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.