Overview

overview

10

Static

static

10

2026-06-25...at.exe

windows10-2004-x64

6

2026-06-25...at.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/06/2026, 22:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-25_53dc00b0d924c399f0f7e4eb8a7ae4ac_amadey_cloudeye_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat.exe
  • Size 3.5MB
  • Sample260629-2bd4eagw6t
  • SHA256 e5402e78b469cb9ea076c5e24eb5653dca0feb72b850f06347b5911cb238d450
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscovery

Malware Config

Signatures

  • Indicator Removal: Clear Persistence 1 TTPs 49 IoCs

    remove IFEO.

    defense_evasion
  • Drops file in Windows directory 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 60 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-25_53dc00b0d924c399f0f7e4eb8a7ae4ac_amadey_cloudeye_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-25_53dc00b0d924c399f0f7e4eb8a7ae4ac_amadey_cloudeye_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat.exe"
    1⤵
    • Indicator Removal: Clear Persistence
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2340

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 a0abdf1d84797dba5e53e5067857ab3b4fd4a63de13043aec4473c957664ebbd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 371d54594bcd21dd303edb4541ec9ab995cccf10cfaabbf7e36cfc790b0cf0a9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 221B
        • SHA256 9665f051052fd318df3a02f82a05f228bedd2d3768a9d0791ededd0d0b3d9a55
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 6408ff45e05df71e99dd6bed1396ef8d8aa4eddef8b20ac5e1ee2efa9cad035d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 395991eded436a3ae880f05f1c666527360eac374141e6746f823b0176cc64cd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 833a7ef26cb7bcabfe303a7e88c924d951d20135070f55e48e011b272a826e62
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 67efcb5b52f4bb697fbdcf4cbcc778006048f2a67bfb2a640aee896d2c4f1739
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 3e51135bf8429563ab4f78e40f19388fa04d7e5a55ee9a3292dfb60b0366a62f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 7d8a42d270c73b69a20affe2adc8ea30b9bc8005724f6ccb2b7ce5bc528c633f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 26113a5e60be6158ff9cbf5b45f64ba9b9f2d204376dc2d5635f2dd188ce3dc0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 27a7de150ad22129b2b725d93dba65d44300234b24e9c4bb67455002a4d486f2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 729d39ce698d7c538432d5823358d3e7a8357464e10c954851109f279833318b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 248B
        • SHA256 7feca10e4b56436a84058f9f731cde5f5a1a451b005df7e0f2bdad12fc5507fd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 260B
        • SHA256 87e2a29e763fe8174901f4646c4e8884507f4b1038b6d923c5f61c0f846969ea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 302B
        • SHA256 73c4a370a8fd3624efc3b6f109fc62cf07f09d70161aa15bb76c9a731fe175ed
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 330B
        • SHA256 1f9804782158e2be5be5d412544d2734125273728a594b048587b66bd7a1c136
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 357B
        • SHA256 d5e9fb07da17a0858d203dc0382119b75ee15fe704f7031cd4eb63141ffc3499
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 384B
        • SHA256 e15d6f59be8f73a52ad03aee9f19a6cc629072648f7fb97033626532e025f5e3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 411B
        • SHA256 9c856420dea4cda9bd2d587630db46b3d5b7b524ae2cc34731535f279c1da465
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 439B
        • SHA256 76bade52e2492099bf87808a04f7a48f889271e59616820fd0b51179e4e81946
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 466B
        • SHA256 be9e8b54f2d7b1f9b264b4233de6346c4ec9da414bf225822fbc9351e8008d4f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 492B
        • SHA256 d94606f892d3dd5e7b0f5857abe776f079004f93d2872ab3384f800b842e4694
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 518B
        • SHA256 54f0b4281fbb2432f103180af7d0fb8b06b4abb69ad81b000ba819b50b2c23f6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 545B
        • SHA256 e4dddde0227788b37f34bbec28101c547d3cd4e125f7e45408c4f424522e2936
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 571B
        • SHA256 55eef2bd1f9c478ae4779a850959c2a4697c4ed01b2482cfe35458134a582394
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 594B
        • SHA256 449832f191a75be4ad7de005a2002d82e010f30e5a4541c8765e84e1ef8be442
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 620B
        • SHA256 f6a166d3ad3ff1da0feb995f57c82919ef241c10d1bcdc0b056bf97d0ad18415
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 650B
        • SHA256 f5086b999bc44a64ee08fb76647231f18412206cfb83fefb79c96a2a660209b7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 676B
        • SHA256 4a0a12e127a379631520883d65f3947a3b357aeb48dff86346f75e67616284d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 702B
        • SHA256 afaaceb07fe8317d2830df5e5b46e37042257a40ba226db360577cbbd705b8b4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 755B
        • SHA256 aa4a28b71f4822dda7bdb06f785176da6477e0c418832e4d8ccdb9bd76036f36
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 781B
        • SHA256 b6c6361b1a9615302ca622a80a120867766db8eac8cacd024cb419b3f750334d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 25B
        • SHA256 c9e656660fb70b08b08908574e3ee80b06168579319cd85af2a3ae4089643983
        • MD5 SHA1 SHA512
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 112B
        • SHA256 bf492ce974f9b687b11c99b5b607f28dcf64adbb359efef2c851b6532548adf6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 807B
        • SHA256 df78fef81d7b78ee315ada9edf0a80c752420b642dfad9af7ea44b8b2ddb5fbf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 834B
        • SHA256 91a2515f4a7830c88973aec6d98cce5097ee2aa493d2333c0ff601cbdc6a8d3e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 862B
        • SHA256 23db4f29617f2d2911d99ae1a31c3756f82b4692dcb978e412aa7f884ce87110
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 889B
        • SHA256 aae10cf78d9b1bc3a4826a678d8fede4e69cc1d990e3631c3ddfa18dcb5497f9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 916B
        • SHA256 167274fec1cab4011025acd0adf8b1ba4a452ee7bff07573b265d5d3c3d44024
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 943B
        • SHA256 de7898827d3608ad495d80da6962df5dc1c21656384de2e590f0ccc88a5ce3dc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 963B
        • SHA256 92efd592509a9169377b29de5bf1cdf53630e97b0ee3b29c72f77dade405abb9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 971B
        • SHA256 87eb31d3ff1a9eb73397d952036f416fdbfe3183ce8e90f5c7a76deae39b387d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 998B
        • SHA256 cb25e0ae1ff9ff33ce5be2f94462b1f784446dee21b5f1f08fa566ae265e9997
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 36014a4b4ec72c29e2d48f6580fe80cf24144915e6f0241f00e6cb86cfafaf21
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 671e56f48f41e4c1d47138900953796f32fecffcc8a2f08703ac5647ebabd360
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 84f2689327a0fa5fa1515ed1dd90a6581948a7375be51184e2034584717cfba5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 5b0e0455a713b7b9d4fa27bcdbe796485394318db78051e5784d1168ae220d01
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 ddecc15c6a7b4ba32b0afcc656ec064be7e6c6a1f81121994b6e4cec55e4c30c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 139B
        • SHA256 f53f2a7f07ece258f7385af5d74260336b1ed5520fab4c2f305ab9bf977bcd6f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 039b0aeae82b248a1684451b743f9992e3adf60694e737b4e39bec1f11a4cd2a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 7c4294fdebcc7c56fd480efaea017ee3f26eabc8787d9c5067c6440d851b98fd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 54a7c417593192f14787516783d207894fb6f371c87522fd100a44d23b29f855
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 adb21c1c76998c0598d3fb9e7e10cb1f372e818bd1eb58bfc7a5e861995df769
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 8f3772a21e34bf7ce33560e987ac4f2534ef376b1ee72c9d41d91e9ccdab3692
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 1e0c43d5634b79dc6ea862775a0fa721785cd333d3f1e9816fb51c6158de83f2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 031e3c97e4e2831c56bca5df40b4a554133217b19f88ce303402e60f2a3dc8f0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 f1071c7d91df5e90bd84302d8dcc09acfc8c88f54e2a782fbe0b7da644c5fab2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 301f591ec354d35a72afca592151ceecbde14dfe5eda0b7a024aec6d1b0e3db6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 70dce773ff3882f4967c3117ed53db30fc18c1ff1421a5c6bb62f294794ba1f9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 f7fab1ac934c8cc7da07b89a07b7c4d85e7f0a048a3c08dedfa6c66663204c02
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 3c5818f1ed7c062e16da28f390b9f6c52bedceb1da3d6abf4bc5c2fe1e7d0be6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 98c6002557b553e4e8a8b4dcb896cafc23ae7909c3324a373c64cc626ba3d8ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 2da8c1d81a838e85240c5c1bafa65d04a6f96754ecc016655706240531f849c0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 166B
        • SHA256 7d81f18814eee45850ab6a33b15a8161d3ebf34e2e65006198d4b1f14c537896
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 e899a0667d275aff71e2afd4476918afed14127977bd82b91d8bba3d88e062be
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 4cd75f9ab9e13473656521879617ce6a1a14eb5e700f3f65aa99d14e13bcb04d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 e5015620909966770cde8f9368fd9a5f09fcf810e3c290e2cb1f69b242eee8b2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 926764a3f265e864e2e2cb1a98052b013ff3020444963aa5aa108a43829639ac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 f5c70fcf2124cc239e88c762491abf8ed7f0712a0dd8932e76f6780a8be06e9f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 b0b127338ac13c8632d1bf05950b55bdef33726d1c26b30bdfd44bc805e353fc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 9ff383094be1ae0c80a3a34c6d3bf4ebd13cd701be3fd952bf717da64d5c4545
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 3aaedb8bfba7c2ae5dc89b29a468511c0c2da1c35df28af42603018d04fd2878
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 27754170db9b8444229960971334e189d75aab775e3192f9479ed90200e09404
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 36a2220700e50e7b07a7124fad21e8b7865878605e2a79e69304f8003cd8b31e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 f8a291ca9cc2ce60e738abe05940162d9a67903d1b2bdbc146bac76a3ba1de5c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 193B
        • SHA256 b43e5e5b35aec77213973034ae26628a4a8d36ab6645646950678c9dbc5de415
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 c7c44ce7d5e2697e4e48908b6a818cff2e58a1ebb3a010f5e03076cb46fd74ac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dkjkgbbld
        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 4abe45ff78aea21f590e1dd327673f3c902623af7519fe34367d71d2f52708ec
        • MD5 SHA1 SHA512 TLSH
        Submit Download