General
- Target 2026-08-07_bcc6efd8bd90b4647232188a752b2f20_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat
- Size 759KB
- Sample260808-a3qgzawfre
- SHA256 7946741eee391d0e54c9408579d9167a78e905a70592249b7889962b78206032
- MD5 bcc6efd8bd90b4647232188a752b2f20
- SHA1 27ef3615207293ff32752f2574a5b7eb859a0ce3
- SHA512 715fb6937154c39e8e2b9f279386fe165023672b9800165c2604da5cb7fde367efab1180f95845724a9957931dc995eed68cac688767a87febf9c814cfcd691a
- SSDEEP 12288:Bv7UhVsE3h2CkgJ+xoKow2kIuFvkKr40023uGChjRKTJlHknPzWMu7pzP:pa2WX5JKANuKKrluGeo1w7WMu7V
- TLSH T1AFF4AE2235818037D57211314928EB7A04BEFE354B7549CBA7E46BAD2E741C39E36B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-07_bcc6efd8bd90b4647232188a752b2f20_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_bcc6efd8bd90b4647232188a752b2f20_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_bcc6efd8bd90b4647232188a752b2f20_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat
- Size 759KB
- SHA256 7946741eee391d0e54c9408579d9167a78e905a70592249b7889962b78206032
- MD5 bcc6efd8bd90b4647232188a752b2f20
- SHA1 27ef3615207293ff32752f2574a5b7eb859a0ce3
- SHA512 715fb6937154c39e8e2b9f279386fe165023672b9800165c2604da5cb7fde367efab1180f95845724a9957931dc995eed68cac688767a87febf9c814cfcd691a
- SSDEEP 12288:Bv7UhVsE3h2CkgJ+xoKow2kIuFvkKr40023uGChjRKTJlHknPzWMu7pzP:pa2WX5JKANuKKrluGeo1w7WMu7V
- TLSH T1AFF4AE2235818037D57211314928EB7A04BEFE354B7549CBA7E46BAD2E741C39E36B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.