General
- Target 2026-08-13_0ec4ead5bce4c9a1c5cd460cdda60c5e_amadey_darkgate_elex_luca-stealer_lynx_magniber_metamorfo_njrat
- Size 11.2MB
- Sample260813-mpff3afn3w
- SHA256 b0b62665c3d5b2ef091f7ae4962db36bf0b666b5f29bf3c8c7416fa0dd286fc2
- MD5 0ec4ead5bce4c9a1c5cd460cdda60c5e
- SHA1 12d83d58862e34983dcdfaf3841cdfacd2ae3a13
- SHA512 ec339c142e8d1bed43daa8e946a0adc7013d6eed891ee39670c6f56b2c20b575829326db58d0782820921afba0820c54e7a685025a0c0d99e108f5c41c37084f
- SSDEEP 196608:t9EcZbkQShLh9R4UhN4jml694qSEuiOc9cGrRPH6heYUHwyiuw4xLv1UvxUw9gcJ:zEcNFYLpxhaHuk580LnxJUZUw2YDL3
- TLSH T1DAC623113752C035DAA52033092EEAAA44DDBF302B6555DBE3A83B7E5E604D27D3392F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_0ec4ead5bce4c9a1c5cd460cdda60c5e_amadey_darkgate_elex_luca-stealer_lynx_magniber_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_0ec4ead5bce4c9a1c5cd460cdda60c5e_amadey_darkgate_elex_luca-stealer_lynx_magniber_metamorfo_njrat.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_0ec4ead5bce4c9a1c5cd460cdda60c5e_amadey_darkgate_elex_luca-stealer_lynx_magniber_metamorfo_njrat
- Size 11.2MB
- SHA256 b0b62665c3d5b2ef091f7ae4962db36bf0b666b5f29bf3c8c7416fa0dd286fc2
- MD5 0ec4ead5bce4c9a1c5cd460cdda60c5e
- SHA1 12d83d58862e34983dcdfaf3841cdfacd2ae3a13
- SHA512 ec339c142e8d1bed43daa8e946a0adc7013d6eed891ee39670c6f56b2c20b575829326db58d0782820921afba0820c54e7a685025a0c0d99e108f5c41c37084f
- SSDEEP 196608:t9EcZbkQShLh9R4UhN4jml694qSEuiOc9cGrRPH6heYUHwyiuw4xLv1UvxUw9gcJ:zEcNFYLpxhaHuk580LnxJUZUw2YDL3
- TLSH T1DAC623113752C035DAA52033092EEAAA44DDBF302B6555DBE3A83B7E5E604D27D3392F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.