General
- Target 2026-10-22_40faf02ac61361039aa8666656998635_amadey_darkgate_elex_luca-stealer_medusalocker_metamorfo_njrat_remcos
- Size 2.7MB
- Sample261024-ss7bvavwhx
- SHA256 fab30c0d0fb115a83b6e9e173f3577c1b4a7514db9de7f59eb0b60283a80554d
- MD5 40faf02ac61361039aa8666656998635
- SHA1 ebc44ec460c76410ffd37f57e5a78fb2da0155c1
- SHA512 837bc08dd4767c50c25d2d2ad7eab8d5d99b3c9e575cbdce885916fefba815805b97baadfdf3152c92edb9fbc4cdd071e061b72d2130125d00253f940ed39aef
- SSDEEP 49152:y2ZZylOtxudozW/R0WyR2ha7NFgD2xK4agkXZa2iueVVGE:x0OtMdnyo6QcKQOiVx
- TLSH T1DDD51610BA47CD22D66101715969EF7A405BEE743BE0B4C772C43AEF3A308DE6D36A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-22_40faf02ac61361039aa8666656998635_amadey_darkgate_elex_luca-stealer_medusalocker_metamorfo_njrat_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_40faf02ac61361039aa8666656998635_amadey_darkgate_elex_luca-stealer_medusalocker_metamorfo_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_40faf02ac61361039aa8666656998635_amadey_darkgate_elex_luca-stealer_medusalocker_metamorfo_njrat_remcos
- Size 2.7MB
- SHA256 fab30c0d0fb115a83b6e9e173f3577c1b4a7514db9de7f59eb0b60283a80554d
- MD5 40faf02ac61361039aa8666656998635
- SHA1 ebc44ec460c76410ffd37f57e5a78fb2da0155c1
- SHA512 837bc08dd4767c50c25d2d2ad7eab8d5d99b3c9e575cbdce885916fefba815805b97baadfdf3152c92edb9fbc4cdd071e061b72d2130125d00253f940ed39aef
- SSDEEP 49152:y2ZZylOtxudozW/R0WyR2ha7NFgD2xK4agkXZa2iueVVGE:x0OtMdnyo6QcKQOiVx
- TLSH T1DDD51610BA47CD22D66101715969EF7A405BEE743BE0B4C772C43AEF3A308DE6D36A16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.