General
- Target 2026-05-23_010ec4685c23211e0bb6382556a2ca97_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry
- Size 2.5MB
- Sample260523-tybb2adt5p
- SHA256 d375a0c8bdb7bc0dd61d16461dd0564a27d30887d6678d9e54c1e533dc0daa9d
- MD5 010ec4685c23211e0bb6382556a2ca97
- SHA1 ed1bc784607552df783d59b32b759602eb2dba64
- SHA512 5a0121c6c3ee1000f50f36e22044f504ac8f1ac1915e61c78d5afed8109ab74f7a8eb29283c2bc75f6d646f6c66a323dd6d3fa390ed2a1e1e60878c0f8538627
- SSDEEP 49152:nj9LxcO4Q5Ybw8ZbnZF9mvWhLxWDpvjsT+I2r3MFYqatglD:njBxcO4EYmCLxwpP/QGE
- TLSH T10AC5AE02F7888172E5B3117198BAAA768235BC154B1193CF63C8FA5DAE733C16B36753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_010ec4685c23211e0bb6382556a2ca97_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_010ec4685c23211e0bb6382556a2ca97_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_010ec4685c23211e0bb6382556a2ca97_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry
- Size 2.5MB
- SHA256 d375a0c8bdb7bc0dd61d16461dd0564a27d30887d6678d9e54c1e533dc0daa9d
- MD5 010ec4685c23211e0bb6382556a2ca97
- SHA1 ed1bc784607552df783d59b32b759602eb2dba64
- SHA512 5a0121c6c3ee1000f50f36e22044f504ac8f1ac1915e61c78d5afed8109ab74f7a8eb29283c2bc75f6d646f6c66a323dd6d3fa390ed2a1e1e60878c0f8538627
- SSDEEP 49152:nj9LxcO4Q5Ybw8ZbnZF9mvWhLxWDpvjsT+I2r3MFYqatglD:njBxcO4EYmCLxwpP/QGE
- TLSH T10AC5AE02F7888172E5B3117198BAAA768235BC154B1193CF63C8FA5DAE733C16B36753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory