General
- Target 2026-08-27_ecaec1039a5de4ee1b2e0819a57a0da6_adposhel_amadey_elex_hijackloader_luca-stealer_medusalocker_njrat_remcos
- Size 1.2MB
- Sample260828-dba5rasvdw
- SHA256 1ba95d1cb8c9c734026459c58fc2dc7a9dccfd7e2a07c4e4b50bbae2f76b3f4a
- MD5 ecaec1039a5de4ee1b2e0819a57a0da6
- SHA1 5366563b115c96772e708dc94a44177971e3a4fb
- SHA512 9a9e88b0aec66f627e3508434fb78b6148726f6454eb693729ada56347fcbb2c244f57750f6734c3e6283e75b8efc54fac18a298d9c3c9b42115dd8c02bd651c
- SSDEEP 24576:usOqLBqtmDWHps7oO3K1UD9GnGHmW1h5K/pcL1ThMlQncQO:gjVbeCiGnVu5K/pcL1TelQncQO
- TLSH T1A6557B91B641C072E47202705978AE69413EBE754BB158DF32C837396A776C36E33B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-27_ecaec1039a5de4ee1b2e0819a57a0da6_adposhel_amadey_elex_hijackloader_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_ecaec1039a5de4ee1b2e0819a57a0da6_adposhel_amadey_elex_hijackloader_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_ecaec1039a5de4ee1b2e0819a57a0da6_adposhel_amadey_elex_hijackloader_luca-stealer_medusalocker_njrat_remcos
- Size 1.2MB
- SHA256 1ba95d1cb8c9c734026459c58fc2dc7a9dccfd7e2a07c4e4b50bbae2f76b3f4a
- MD5 ecaec1039a5de4ee1b2e0819a57a0da6
- SHA1 5366563b115c96772e708dc94a44177971e3a4fb
- SHA512 9a9e88b0aec66f627e3508434fb78b6148726f6454eb693729ada56347fcbb2c244f57750f6734c3e6283e75b8efc54fac18a298d9c3c9b42115dd8c02bd651c
- SSDEEP 24576:usOqLBqtmDWHps7oO3K1UD9GnGHmW1h5K/pcL1ThMlQncQO:gjVbeCiGnVu5K/pcL1TelQncQO
- TLSH T1A6557B91B641C072E47202705978AE69413EBE754BB158DF32C837396A776C36E33B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.