General
- Target 2026-08-03_26e31765cb70fff073280100b085fce0_darkgate_elex_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos
- Size 15.5MB
- Sample260804-dptt1sfk6v
- SHA256 516f8df4b61da5151f6e1402142f20cc0a7b5dd22d447537464aa19ebfc8f015
- MD5 26e31765cb70fff073280100b085fce0
- SHA1 2c5a27bb2039e6e8028ed7102fa824a5f49eba87
- SHA512 0a4e62fa991d8893459bb34bfc533ebb7cf264dada2daf3c79129b822dbdd1f102a32e219da98c45bea41e4ac3f4632d5ecd0584a66ba2bf4517b4ba47132831
- SSDEEP 393216:sXbawRMdnSRgCM8e2BvkHBdDCChfW6n5IYO5NvpBcuScsc:sXb7iSgCM8e2SBXJW4ZO5N7fSa
- TLSH T1D7F633203246C0B2D65186769B7DCE6E053DBF210F2341DF57A4AB3E58609C36F7AA1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_26e31765cb70fff073280100b085fce0_darkgate_elex_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_26e31765cb70fff073280100b085fce0_darkgate_elex_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_26e31765cb70fff073280100b085fce0_darkgate_elex_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos
- Size 15.5MB
- SHA256 516f8df4b61da5151f6e1402142f20cc0a7b5dd22d447537464aa19ebfc8f015
- MD5 26e31765cb70fff073280100b085fce0
- SHA1 2c5a27bb2039e6e8028ed7102fa824a5f49eba87
- SHA512 0a4e62fa991d8893459bb34bfc533ebb7cf264dada2daf3c79129b822dbdd1f102a32e219da98c45bea41e4ac3f4632d5ecd0584a66ba2bf4517b4ba47132831
- SSDEEP 393216:sXbawRMdnSRgCM8e2BvkHBdDCChfW6n5IYO5NvpBcuScsc:sXb7iSgCM8e2SBXJW4ZO5N7fSa
- TLSH T1D7F633203246C0B2D65186769B7DCE6E053DBF210F2341DF57A4AB3E58609C36F7AA1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.