General
- Target 2026-08-01_aac5e271a37a68b754f8eb1759f15023_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
- Size 2.3MB
- Sample260801-tkx9mszfng
- SHA256 a7c41f60571b968061561d1472096e9d3245d0f9b8b24c143e538cf03ccbe0bb
- MD5 aac5e271a37a68b754f8eb1759f15023
- SHA1 d5edda3abd2e600d63717635723311d589d25603
- SHA512 7acd30f67cd393d01d641414a8c950ed98198c8dad9dd4ac082b56201c938433ef65386948f2cd8f7d294ea85e9c53486d6e735637769152eff551ffb8ff1fec
- SSDEEP 49152:QaAScPFLWNa/ljSykobxfH/sRW3G0GJxYfW9Zfac:vlcYmnfH/mW9fW9B
- TLSH T111B59F317A91C237D5A70171A97DBB6E45793F385B2480CBA3C43F2E65314D36A32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-01_aac5e271a37a68b754f8eb1759f15023_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_aac5e271a37a68b754f8eb1759f15023_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_aac5e271a37a68b754f8eb1759f15023_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
- Size 2.3MB
- SHA256 a7c41f60571b968061561d1472096e9d3245d0f9b8b24c143e538cf03ccbe0bb
- MD5 aac5e271a37a68b754f8eb1759f15023
- SHA1 d5edda3abd2e600d63717635723311d589d25603
- SHA512 7acd30f67cd393d01d641414a8c950ed98198c8dad9dd4ac082b56201c938433ef65386948f2cd8f7d294ea85e9c53486d6e735637769152eff551ffb8ff1fec
- SSDEEP 49152:QaAScPFLWNa/ljSykobxfH/sRW3G0GJxYfW9Zfac:vlcYmnfH/mW9fW9B
- TLSH T111B59F317A91C237D5A70171A97DBB6E45793F385B2480CBA3C43F2E65314D36A32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.