General
- Target 2026-08-03_c02459a6425bcab1b8f88dc4d08e7ffe_amadey_darkgate_elex_hijackloader_luca-stealer_magniber_njrat_remcos
- Size 45.5MB
- Sample260803-heflvsszhx
- SHA256 bd032ceb30b73b69d4e8c55e02181ed07234a4bbe1177403dec8023059928895
- MD5 c02459a6425bcab1b8f88dc4d08e7ffe
- SHA1 1f2509f3cf016416296b45026f4aaa2ee45abbf8
- SHA512 10e0fc4a061cc05cbd9fdf5ed18dfc929f63a0c528ef1cfde93d31e3e9f89f0ec904e344d0d44898df30ce480fe7f59f73921241d41e4b82b70e6d3840987e25
- SSDEEP 786432:mwPM5Eavwnt9qpHRVtY98o3DzbV6p9Dj86q554rNObMoL15oYgU+qkGU+yEd2Nnb:mwPM5vI3kC8o3DzcDj8Cre4s+uMnb
- TLSH T19FA73331BC45C072CAA20176857CF62B449D7F360BA590EB63C83A3E5E709D36B3665B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_c02459a6425bcab1b8f88dc4d08e7ffe_amadey_darkgate_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c02459a6425bcab1b8f88dc4d08e7ffe_amadey_darkgate_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c02459a6425bcab1b8f88dc4d08e7ffe_amadey_darkgate_elex_hijackloader_luca-stealer_magniber_njrat_remcos
- Size 45.5MB
- SHA256 bd032ceb30b73b69d4e8c55e02181ed07234a4bbe1177403dec8023059928895
- MD5 c02459a6425bcab1b8f88dc4d08e7ffe
- SHA1 1f2509f3cf016416296b45026f4aaa2ee45abbf8
- SHA512 10e0fc4a061cc05cbd9fdf5ed18dfc929f63a0c528ef1cfde93d31e3e9f89f0ec904e344d0d44898df30ce480fe7f59f73921241d41e4b82b70e6d3840987e25
- SSDEEP 786432:mwPM5Eavwnt9qpHRVtY98o3DzbV6p9Dj86q554rNObMoL15oYgU+qkGU+yEd2Nnb:mwPM5vI3kC8o3DzcDj8Cre4s+uMnb
- TLSH T19FA73331BC45C072CAA20176857CF62B449D7F360BA590EB63C83A3E5E709D36B3665B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.