2026-04-23_738167985635f0c8b653e406bc8796ee_amadey_darkgate_elex_glassworm_icedid_njrat_rhadamanthys_stop

General

Target
2026-04-23_738167985635f0c8b653e406bc8796ee_amadey_darkgate_elex_glassworm_icedid_njrat_rhadamanthys_stop
Size 2.5MB
Sample260423-rxv9pse18n
SHA256 cbcc5b655668a417c1f16e36abf9be29fc6d37e9bead211b7b484b6c0f0153eb
MD5 738167985635f0c8b653e406bc8796ee
SHA1 4c4c223f39ffda6742579e1be0a1973f53b62309
SHA512 c45f792612c186f00f32ee3acbad2eed439026fb4476f160bfa978aad5f789994b914bbbd52cbf1df070cc205ac736a63d679ed6bb71b533336c387d6cb70da6
SSDEEP 49152:B7edCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnO1Pji0AjhK:xK5N55sgjOk9WOljotK
TLSH
T1F6C57B12B6608BFAC8724075C9A6A375EA757C210B20E7CB529CE31D5E33BD19D37722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-23_738167985635f0c8b653e406bc8796ee_amadey_darkgate_elex_glassworm_icedid_njrat_rhadamanthys_stop

2026-04-23_738167985635f0c8b653e406bc8796ee_amadey_darkgate_elex_glassworm_icedid_njrat_rhadamanthys_stop

.exe 2.5MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 cbcc5b655668a417c1f16e36abf9be29fc6d37e9bead211b7b484b6c0f0153eb
MD5 738167985635f0c8b653e406bc8796ee
SHA1 4c4c223f39ffda6742579e1be0a1973f53b62309
SHA512 c45f792612c186f00f32ee3acbad2eed439026fb4476f160bfa978aad5f789994b914bbbd52cbf1df070cc205ac736a63d679ed6bb71b533336c387d6cb70da6
SSDEEP 49152:B7edCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnO1Pji0AjhK:xK5N55sgjOk9WOljotK
TLSH
T1F6C57B12B6608BFAC8724075C9A6A375EA757C210B20E7CB529CE31D5E33BD19D37722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths