General
- Target 2026-07-02_8d99abfd57ef87e5d8392d4bd477acfb_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 2.7MB
- Sample260703-bpvefaev5l
- SHA256 a203d6d46b47eff00b13d3d2f93906fbf6e3afabb97ac0faeae6f362f95250bd
- MD5 8d99abfd57ef87e5d8392d4bd477acfb
- SHA1 27f1077e461d8b32fce30dd9ba538a9baec22e58
- SHA512 44e1cce62a94fe23cdd0f82e8e1d576379fa37f21c66675f0d35728524a31bef90a306e6f075fd2c35d63a68e28e8f205d01fa19e40096c03fa66a4db6dc1d6a
- SSDEEP 49152:OYC7vtBCCtPf5fXI++yYcfB1U13J9KM5TUGX33mkzg9/vUCTFqzm:OYC7GCtPRPIZDk23WM89k6FJ
- TLSH T159D5BF11B6C1C032E6B206B1A93CAB2945BDFE30072594DBE3D82D1D69705D2EB36F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_8d99abfd57ef87e5d8392d4bd477acfb_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_8d99abfd57ef87e5d8392d4bd477acfb_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_8d99abfd57ef87e5d8392d4bd477acfb_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 2.7MB
- SHA256 a203d6d46b47eff00b13d3d2f93906fbf6e3afabb97ac0faeae6f362f95250bd
- MD5 8d99abfd57ef87e5d8392d4bd477acfb
- SHA1 27f1077e461d8b32fce30dd9ba538a9baec22e58
- SHA512 44e1cce62a94fe23cdd0f82e8e1d576379fa37f21c66675f0d35728524a31bef90a306e6f075fd2c35d63a68e28e8f205d01fa19e40096c03fa66a4db6dc1d6a
- SSDEEP 49152:OYC7vtBCCtPf5fXI++yYcfB1U13J9KM5TUGX33mkzg9/vUCTFqzm:OYC7GCtPRPIZDk23WM89k6FJ
- TLSH T159D5BF11B6C1C032E6B206B1A93CAB2945BDFE30072594DBE3D82D1D69705D2EB36F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.