General
- Target 2026-06-27_08cdd3d820846eb3fd9d44b0db17a8c4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260629-mdck2acx9n
- SHA256 951c095b751087b70ebb8791a20c462de5d9ee7c99fe9325e14d5a6b5f2459f5
- MD5 08cdd3d820846eb3fd9d44b0db17a8c4
- SHA1 2d16868b29f9ee48f789f659c6435d130073eed9
- SHA512 68a038e4eca972aeb0b9379b8932b58b6b19882028b1e864b6f4558bbd2340315a2ef68ee394aba8a0bf7de4d802fe0f91b4010ecea6781503b420989477c5ab
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51iQ:GDkpzl84UkTcpUjX1iQ
- TLSH T16BF56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_08cdd3d820846eb3fd9d44b0db17a8c4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_08cdd3d820846eb3fd9d44b0db17a8c4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_08cdd3d820846eb3fd9d44b0db17a8c4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 951c095b751087b70ebb8791a20c462de5d9ee7c99fe9325e14d5a6b5f2459f5
- MD5 08cdd3d820846eb3fd9d44b0db17a8c4
- SHA1 2d16868b29f9ee48f789f659c6435d130073eed9
- SHA512 68a038e4eca972aeb0b9379b8932b58b6b19882028b1e864b6f4558bbd2340315a2ef68ee394aba8a0bf7de4d802fe0f91b4010ecea6781503b420989477c5ab
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51iQ:GDkpzl84UkTcpUjX1iQ
- TLSH T16BF56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory