General
- Target 2026-07-18_10bc26334b7efb3c2d71156d393d0b7b_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos
- Size 2.6MB
- Sample260718-krbjsaev2m
- SHA256 3ddbfa94c99b35c197db61a2eec794961e624689f2e69eeaa2247afecd8c3f26
- MD5 10bc26334b7efb3c2d71156d393d0b7b
- SHA1 674ad7913530b9f462eaeee311b5e921b938f51c
- SHA512 620bc6be411e5c4fb9fa23be7c965caad190a9a47d816c50054c13ab990529e8cd75c584fa0f977d64672ec4a38b0716d6a7d43b5b2cac594a6cf64428dec6e5
- SSDEEP 49152:nMvcUuh3Z0JvDr67w002o+jx4DodRJfmRb6+YbHl9mylpDvYRVp3K:nSruh3KJ67w002bx4imRzy5lpmi
- TLSH T1A7C59A112E3E8422F412863C096CA577C57BBBDCBB2F459722B4667B1B23781952DB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-18_10bc26334b7efb3c2d71156d393d0b7b_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_10bc26334b7efb3c2d71156d393d0b7b_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_10bc26334b7efb3c2d71156d393d0b7b_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos
- Size 2.6MB
- SHA256 3ddbfa94c99b35c197db61a2eec794961e624689f2e69eeaa2247afecd8c3f26
- MD5 10bc26334b7efb3c2d71156d393d0b7b
- SHA1 674ad7913530b9f462eaeee311b5e921b938f51c
- SHA512 620bc6be411e5c4fb9fa23be7c965caad190a9a47d816c50054c13ab990529e8cd75c584fa0f977d64672ec4a38b0716d6a7d43b5b2cac594a6cf64428dec6e5
- SSDEEP 49152:nMvcUuh3Z0JvDr67w002o+jx4DodRJfmRb6+YbHl9mylpDvYRVp3K:nSruh3KJ67w002bx4imRzy5lpmi
- TLSH T1A7C59A112E3E8422F412863C096CA577C57BBBDCBB2F459722B4667B1B23781952DB33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks for any installed AV software in registry
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.