General
- Target 2026-07-20_63a562699734a9c16dd56b3470a705f1_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos
- Size 2.6MB
- Sample260720-lrpl3sdw4m
- SHA256 1d419ccac1d1a613add5a1eb8d51d7b125a42198ed9d5134e08bf11a27fc377f
- MD5 63a562699734a9c16dd56b3470a705f1
- SHA1 04160e81f42192a3c21dc2b96ceb54a60ccc8e27
- SHA512 7506f852a739d14bdc2bc2801a77b77bf11417ecdf9beac4cb81652b825f5f194708ab3b7599cbc96dcd004eb59ea091a933f7aa4f70226733f8c84225f924d9
- SSDEEP 49152:0MvcUuh3ZvJvDrwp9c7tyd4c7lrmzmDXkuVUyLDbSl2N27Xo0qIzf6ixW:0Sruh3FJgC7gnJ5kS5sBJzf6V
- TLSH T111C589102E7E8422F422863C096CA577C5BBBBDCBB1F459762B0663B0B23791552E773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-20_63a562699734a9c16dd56b3470a705f1_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_63a562699734a9c16dd56b3470a705f1_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_63a562699734a9c16dd56b3470a705f1_amadey_elex_luca-stealer_lynx_medusalocker_njrat_remcos
- Size 2.6MB
- SHA256 1d419ccac1d1a613add5a1eb8d51d7b125a42198ed9d5134e08bf11a27fc377f
- MD5 63a562699734a9c16dd56b3470a705f1
- SHA1 04160e81f42192a3c21dc2b96ceb54a60ccc8e27
- SHA512 7506f852a739d14bdc2bc2801a77b77bf11417ecdf9beac4cb81652b825f5f194708ab3b7599cbc96dcd004eb59ea091a933f7aa4f70226733f8c84225f924d9
- SSDEEP 49152:0MvcUuh3ZvJvDrwp9c7tyd4c7lrmzmDXkuVUyLDbSl2N27Xo0qIzf6ixW:0Sruh3FJgC7gnJ5kS5sBJzf6V
- TLSH T111C589102E7E8422F422863C096CA577C5BBBBDCBB1F459762B0663B0B23791552E773
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks for any installed AV software in registry
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.