General
- Target 2026-08-22_12b5d38d01bbb30f3e9f578dc98c3137_amadey_coinminer_darkgate_elex_medusalocker_njrat_remcos
- Size 1.4MB
- Sample260823-plergawfre
- SHA256 e5a09142c113601f2520d622f3fc905fcc09e9937630eef594c4aff6f8998013
- MD5 12b5d38d01bbb30f3e9f578dc98c3137
- SHA1 dd8e8a0e145dffe6c83f65adba27ed368a97d1c6
- SHA512 44053caabce8cbb25d0d55bdc8b4986b891b250c0db3df9d67021db1b01a0ade95e9454385015d42a1344392864276f400bd555bb5a762669343b1afa4b2746b
- SSDEEP 24576:NcUFO4fTL8hW4nHgTbpdi2yDVg82cNqJJnvsP7s1noAAy+6+RbTWTS5ihTUmy:S/cTL8E4nAKN6XBLvsP7anoAwhRbTWTq
- TLSH T15D657C703742C137EAA101B1993CDAAF905C7A251FA754CBA3C81F6E58B09E35B35E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-22_12b5d38d01bbb30f3e9f578dc98c3137_amadey_coinminer_darkgate_elex_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_12b5d38d01bbb30f3e9f578dc98c3137_amadey_coinminer_darkgate_elex_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_12b5d38d01bbb30f3e9f578dc98c3137_amadey_coinminer_darkgate_elex_medusalocker_njrat_remcos
- Size 1.4MB
- SHA256 e5a09142c113601f2520d622f3fc905fcc09e9937630eef594c4aff6f8998013
- MD5 12b5d38d01bbb30f3e9f578dc98c3137
- SHA1 dd8e8a0e145dffe6c83f65adba27ed368a97d1c6
- SHA512 44053caabce8cbb25d0d55bdc8b4986b891b250c0db3df9d67021db1b01a0ade95e9454385015d42a1344392864276f400bd555bb5a762669343b1afa4b2746b
- SSDEEP 24576:NcUFO4fTL8hW4nHgTbpdi2yDVg82cNqJJnvsP7s1noAAy+6+RbTWTS5ihTUmy:S/cTL8E4nAKN6XBLvsP7anoAwhRbTWTq
- TLSH T15D657C703742C137EAA101B1993CDAAF905C7A251FA754CBA3C81F6E58B09E35B35E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.