General
- Target 2026-05-31_92cbdc9123df5f8d67f3de484848c40e_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- Sample260531-he7eksa18v
- SHA256 16fdaed845fcc583f17460739fb64949c0b5568c86916ea0bc0a2e3eefb91e26
- MD5 92cbdc9123df5f8d67f3de484848c40e
- SHA1 a741f763ac2988ebec6008fd4cf1746ac42f4d2d
- SHA512 fd7a1e6e021650aa895709c045cd592598edfb282286e6f23d9217b85ee3940dfe11924202f3ff3365be542b873fbf0b51222371306083c51e27b0f191f8eaa6
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjckfx3yJ+KGxr2c3uy:CQ9NHcBWeFXOlRj3QJglrey
- TLSH T144A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_92cbdc9123df5f8d67f3de484848c40e_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_92cbdc9123df5f8d67f3de484848c40e_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- SHA256 16fdaed845fcc583f17460739fb64949c0b5568c86916ea0bc0a2e3eefb91e26
- MD5 92cbdc9123df5f8d67f3de484848c40e
- SHA1 a741f763ac2988ebec6008fd4cf1746ac42f4d2d
- SHA512 fd7a1e6e021650aa895709c045cd592598edfb282286e6f23d9217b85ee3940dfe11924202f3ff3365be542b873fbf0b51222371306083c51e27b0f191f8eaa6
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjckfx3yJ+KGxr2c3uy:CQ9NHcBWeFXOlRj3QJglrey
- TLSH T144A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Suspicious use of SetThreadContext