General
- Target 2026-06-27_b7a3a0aade0e49a0684a389f461474be_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260629-d5nypsdv5l
- SHA256 b3e22caa4fde3573dcdb0a1982eddeead1e67c5624b8689b7ce131b012f590c1
- MD5 b7a3a0aade0e49a0684a389f461474be
- SHA1 6a90e2ae4156d3f1d9341ecad208a43c671e8999
- SHA512 23d6669b6a4dd1f1d8dd0acf764f30db822e3a0cbdd6e270a2c2ab8ac25956e495022b3866737751c0555527caf5d0c33da89f388ea7476616e1243480921bcb
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51iN:GDkpzl84UkTcpUjX1iN
- TLSH T122F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b7a3a0aade0e49a0684a389f461474be_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b7a3a0aade0e49a0684a389f461474be_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b7a3a0aade0e49a0684a389f461474be_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 b3e22caa4fde3573dcdb0a1982eddeead1e67c5624b8689b7ce131b012f590c1
- MD5 b7a3a0aade0e49a0684a389f461474be
- SHA1 6a90e2ae4156d3f1d9341ecad208a43c671e8999
- SHA512 23d6669b6a4dd1f1d8dd0acf764f30db822e3a0cbdd6e270a2c2ab8ac25956e495022b3866737751c0555527caf5d0c33da89f388ea7476616e1243480921bcb
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51iN:GDkpzl84UkTcpUjX1iN
- TLSH T122F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory