General
- Target 2026-07-19_f800aada4d53f9860eef9e4ce69e8edf_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos
- Size 2.6MB
- Sample260719-y9gqeaev3s
- SHA256 62ba126ac0e9d6d0cbbd60ab226e431653775a321baa16f019f172763b288368
- MD5 f800aada4d53f9860eef9e4ce69e8edf
- SHA1 a47c8d45ed00cfcc2b17d73dce3c56724cdd87e2
- SHA512 158fd0e8fffc25a393a391919a232f7b6682d6fb86569fcc67c5d2c9aed373f0e4b542d1dcdbd95f57bb633fcab29d947c22126461e466d2d3b297310873449a
- SSDEEP 49152:aMvcUuh3ZvJvDrBjGqPgr30KPyed0nrsKJZkJNife46kp1:aSruh3RJBRPg7LjiJKJNi16C
- TLSH T123C58A112E7E8425F422863C496CA537C5BBBBDCBB2F459762B0263B1B23390592D773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-19_f800aada4d53f9860eef9e4ce69e8edf_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_f800aada4d53f9860eef9e4ce69e8edf_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_f800aada4d53f9860eef9e4ce69e8edf_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos
- Size 2.6MB
- SHA256 62ba126ac0e9d6d0cbbd60ab226e431653775a321baa16f019f172763b288368
- MD5 f800aada4d53f9860eef9e4ce69e8edf
- SHA1 a47c8d45ed00cfcc2b17d73dce3c56724cdd87e2
- SHA512 158fd0e8fffc25a393a391919a232f7b6682d6fb86569fcc67c5d2c9aed373f0e4b542d1dcdbd95f57bb633fcab29d947c22126461e466d2d3b297310873449a
- SSDEEP 49152:aMvcUuh3ZvJvDrBjGqPgr30KPyed0nrsKJZkJNife46kp1:aSruh3RJBRPg7LjiJKJNi16C
- TLSH T123C58A112E7E8425F422863C496CA537C5BBBBDCBB2F459762B0263B1B23390592D773
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks for any installed AV software in registry
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.