General
- Target 2026-10-01_41377d6f437215f15b152b5d749352f6_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 9.1MB
- Sample261002-tfprpswdkf
- SHA256 75992a8c3300aab77fcbcfde25cec19d421407ff1c13b29bc701bdcf3c6a2181
- MD5 41377d6f437215f15b152b5d749352f6
- SHA1 5fdbd8e61c3816fa107cf53fa6c999c0c149d2e4
- SHA512 b7236467925adb9d5732ac2ebf02d3c71acaca306191dae8c1288fb0dd6dd1b8b3dba09e4dbda43cc2c287898fc2735b7f4d07e07ecee290515ddf3c8cdb71a2
- SSDEEP 196608:6gMp0jWZNlSIKTiFTdQGq15KpKYecqQXfM+zZW6:zJjWZNlSI0iBd415KcYxqQXfr
- TLSH T1C5A6122077428076D5E151B0892B9B6950E97F342B6284FFE3D87A6E1D708C23F3BE56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-01_41377d6f437215f15b152b5d749352f6_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_41377d6f437215f15b152b5d749352f6_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_41377d6f437215f15b152b5d749352f6_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 9.1MB
- SHA256 75992a8c3300aab77fcbcfde25cec19d421407ff1c13b29bc701bdcf3c6a2181
- MD5 41377d6f437215f15b152b5d749352f6
- SHA1 5fdbd8e61c3816fa107cf53fa6c999c0c149d2e4
- SHA512 b7236467925adb9d5732ac2ebf02d3c71acaca306191dae8c1288fb0dd6dd1b8b3dba09e4dbda43cc2c287898fc2735b7f4d07e07ecee290515ddf3c8cdb71a2
- SSDEEP 196608:6gMp0jWZNlSIKTiFTdQGq15KpKYecqQXfM+zZW6:zJjWZNlSI0iBd415KcYxqQXfr
- TLSH T1C5A6122077428076D5E151B0892B9B6950E97F342B6284FFE3D87A6E1D708C23F3BE56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.