General
- Target 2026-10-22_97db583c35336d044fc64fe9c4fc9d0e_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.1MB
- Sample261024-ebc5sastcw
- SHA256 5fe82aefc78174d18cbbded019af3e6816ee7217de1503c04245b035e226b12d
- MD5 97db583c35336d044fc64fe9c4fc9d0e
- SHA1 2400ea6f897f55df0b1b6eaf8e14e02986d60a5f
- SHA512 c669af9bf609238e9f74a47f0b374ff2ef9fe8604750e7017f523d24580b3223d8373bd55395680c1e307b4513d8c356e0252f61b54e9f2f5527edcd5db3f42d
- SSDEEP 49152:0pJyseEZbHSWtJTkDfU+68/opDahYzED7R+lEPoDbT:oJyseEZbHSWtJTkzUJDaNvdYT
- TLSH T1FCA5CF11BB418171E2B102705579AB7689BD7D39BF308ACB63D01B2DD9306E2AD35F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_97db583c35336d044fc64fe9c4fc9d0e_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_97db583c35336d044fc64fe9c4fc9d0e_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_97db583c35336d044fc64fe9c4fc9d0e_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.1MB
- SHA256 5fe82aefc78174d18cbbded019af3e6816ee7217de1503c04245b035e226b12d
- MD5 97db583c35336d044fc64fe9c4fc9d0e
- SHA1 2400ea6f897f55df0b1b6eaf8e14e02986d60a5f
- SHA512 c669af9bf609238e9f74a47f0b374ff2ef9fe8604750e7017f523d24580b3223d8373bd55395680c1e307b4513d8c356e0252f61b54e9f2f5527edcd5db3f42d
- SSDEEP 49152:0pJyseEZbHSWtJTkDfU+68/opDahYzED7R+lEPoDbT:oJyseEZbHSWtJTkzUJDaNvdYT
- TLSH T1FCA5CF11BB418171E2B102705579AB7689BD7D39BF308ACB63D01B2DD9306E2AD35F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory