General
- Target 2026-07-04_15476dae72a67974de01e05e57031fba_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
- Size 2.3MB
- Sample260704-mtmqyaav5l
- SHA256 2efb7e0cc16d2b6e070aa3f0e681249da9ce3bc639ee90e0d8d7d1004a4aedbc
- MD5 15476dae72a67974de01e05e57031fba
- SHA1 e6b84c5b7d8213818cc030c1b41e5995b4eee2d5
- SHA512 35ddf2cc940962d267249ac61f7cecad3d57f14c067a447073f543d883e6d638de407c6be887d85139d33b933e329c110d187210a11f94bd823661f40db15556
- SSDEEP 49152:4697qsp8Fo6/coMdlIX9GhnSHt44EO9fW9aEZX6:39FKv9GhSvfW9aEA
- TLSH T1C1B58E317A54C237D5A20271A97DBB5E85793F385B2480CFA3C43F2E65319D35A32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-04_15476dae72a67974de01e05e57031fba_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_15476dae72a67974de01e05e57031fba_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_15476dae72a67974de01e05e57031fba_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
- Size 2.3MB
- SHA256 2efb7e0cc16d2b6e070aa3f0e681249da9ce3bc639ee90e0d8d7d1004a4aedbc
- MD5 15476dae72a67974de01e05e57031fba
- SHA1 e6b84c5b7d8213818cc030c1b41e5995b4eee2d5
- SHA512 35ddf2cc940962d267249ac61f7cecad3d57f14c067a447073f543d883e6d638de407c6be887d85139d33b933e329c110d187210a11f94bd823661f40db15556
- SSDEEP 49152:4697qsp8Fo6/coMdlIX9GhnSHt44EO9fW9aEZX6:39FKv9GhSvfW9aEA
- TLSH T1C1B58E317A54C237D5A20271A97DBB5E85793F385B2480CFA3C43F2E65319D35A32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.