General
- Target 2026-08-08_479053f9f8c12ae8ee169f117d370721_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 1.4MB
- Sample260808-tpbw7shr3y
- SHA256 ac282ff5702297c6d079350475ff40298efbaac900d70a4c979ef60e0b226f42
- MD5 479053f9f8c12ae8ee169f117d370721
- SHA1 4ee17a47da5da5193d5e5863ca8e7b5420824245
- SHA512 f1fa2fee836c91a647005cab844e04b331ff95556925a86d55e39755301bf1650596b801e9de6341e2004304a2ffaf9a0845d1635afbe2aa6ab7bd7bb787e9bf
- SSDEEP 24576:TdyKhOJcs7Z/7P+XZCxy2/XUz7HSedhKSQCnxgcqww8iBfaaeTp:RyIObqGy28PLhKSQCnxgcqww8iNaaeN
- TLSH T1EF657CE1B606C032E56151B0D978EFA6819CEEB44FA244DBB3C40F295560AD36F36F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-08_479053f9f8c12ae8ee169f117d370721_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_479053f9f8c12ae8ee169f117d370721_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_479053f9f8c12ae8ee169f117d370721_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 1.4MB
- SHA256 ac282ff5702297c6d079350475ff40298efbaac900d70a4c979ef60e0b226f42
- MD5 479053f9f8c12ae8ee169f117d370721
- SHA1 4ee17a47da5da5193d5e5863ca8e7b5420824245
- SHA512 f1fa2fee836c91a647005cab844e04b331ff95556925a86d55e39755301bf1650596b801e9de6341e2004304a2ffaf9a0845d1635afbe2aa6ab7bd7bb787e9bf
- SSDEEP 24576:TdyKhOJcs7Z/7P+XZCxy2/XUz7HSedhKSQCnxgcqww8iBfaaeTp:RyIObqGy28PLhKSQCnxgcqww8iNaaeN
- TLSH T1EF657CE1B606C032E56151B0D978EFA6819CEEB44FA244DBB3C40F295560AD36F36F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.