General
- Target 2026-10-23_297e1e198145dbce2d576ba8e739c3ee_amadey_darkgate_elex_luca-stealer_magniber_njrat_remcos
- Size 3.9MB
- Sample261023-rd1ebab15z
- SHA256 fd1ce445447ab59d0b95f7b8148a790966f82f626f336483c8197fe19dd12ad5
- MD5 297e1e198145dbce2d576ba8e739c3ee
- SHA1 e8119fc055cbc7aa693336c8d533335a56dc48af
- SHA512 c38e7a0503231758b8ea669f2a19f09f8906f48c76caf64ffd4949fbb8ce0e1818796d0407456687de9368f8d6abbf3b6e06d6a4ef0da45a6760ff471ec2fb69
- SSDEEP 49152:QY5CA7FLl1dBf7IeB7U0KeSzMzOp09B/pwpTVlIlrP7iG3mSUCJmRIQ22WCMrTYM:b55xsa4z8PGpREzm2mSNJP2WCMvXWZK5
- TLSH T1B716F16136428035EA7611B1993CEEAAD89DAF304F7491CB63D82F7D1E711C39E31A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_297e1e198145dbce2d576ba8e739c3ee_amadey_darkgate_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_297e1e198145dbce2d576ba8e739c3ee_amadey_darkgate_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_297e1e198145dbce2d576ba8e739c3ee_amadey_darkgate_elex_luca-stealer_magniber_njrat_remcos
- Size 3.9MB
- SHA256 fd1ce445447ab59d0b95f7b8148a790966f82f626f336483c8197fe19dd12ad5
- MD5 297e1e198145dbce2d576ba8e739c3ee
- SHA1 e8119fc055cbc7aa693336c8d533335a56dc48af
- SHA512 c38e7a0503231758b8ea669f2a19f09f8906f48c76caf64ffd4949fbb8ce0e1818796d0407456687de9368f8d6abbf3b6e06d6a4ef0da45a6760ff471ec2fb69
- SSDEEP 49152:QY5CA7FLl1dBf7IeB7U0KeSzMzOp09B/pwpTVlIlrP7iG3mSUCJmRIQ22WCMrTYM:b55xsa4z8PGpREzm2mSNJP2WCMvXWZK5
- TLSH T1B716F16136428035EA7611B1993CEEAAD89DAF304F7491CB63D82F7D1E711C39E31A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.