General
- Target 2026-06-28_58538bb1fb3e3bd146affd96bd850608_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260628-2elmnafv6y
- SHA256 043a7dab88e9085d10996c65830f3d2889995ed0d0b241ff2584c65013de5d90
- MD5 58538bb1fb3e3bd146affd96bd850608
- SHA1 4b55492d0dd760d3ffc41f9c04107ac79753160d
- SHA512 50dc6f6eb8d9f15f29652cdb7f1e836ba8176a62b28cd6f28d8b9e31a7c00dac75db9d9c54f49380850b99790bfd00930284b8b385896a39d68611cb3b4cb4b1
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51iA:GDkpzl84UkTcpUjX1iA
- TLSH T15FF56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-28_58538bb1fb3e3bd146affd96bd850608_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_58538bb1fb3e3bd146affd96bd850608_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_58538bb1fb3e3bd146affd96bd850608_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 043a7dab88e9085d10996c65830f3d2889995ed0d0b241ff2584c65013de5d90
- MD5 58538bb1fb3e3bd146affd96bd850608
- SHA1 4b55492d0dd760d3ffc41f9c04107ac79753160d
- SHA512 50dc6f6eb8d9f15f29652cdb7f1e836ba8176a62b28cd6f28d8b9e31a7c00dac75db9d9c54f49380850b99790bfd00930284b8b385896a39d68611cb3b4cb4b1
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51iA:GDkpzl84UkTcpUjX1iA
- TLSH T15FF56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory