General
- Target 2026-06-29_d19f3c095a71040d4df10d929a45e482_amadey_darkgate_elex_glassworm_luca-stealer_njrat_wannacry
- Size 1.9MB
- Sample260630-dqa4asdv4t
- SHA256 cca8d9f1fcd64e75c59a1fb519b86b94d7c3d00abb948bfaa4c8725a43638b4c
- MD5 d19f3c095a71040d4df10d929a45e482
- SHA1 719079f37bffcac3befdf8bca976d61ed0d650de
- SHA512 0adb66478d3bced0edc1cf7eae5c48e5a60f944258b284f500c6cf22bba6edac1d282e3b3bb7e729d9fadcb1208bd257984976e8d5ddb0de7d99837d02eccd72
- SSDEEP 49152:HyIO6XrnRNm5zuXp7jRG6wLvSpDiTEh3xTeDB1r:SIOqrRXG6wL6732
- TLSH T11C95CF227E92C0B7E2A70230552EA7BA8AB9B5315B3045C7F38C2A3D5F715C09636777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_d19f3c095a71040d4df10d929a45e482_amadey_darkgate_elex_glassworm_luca-stealer_njrat_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_d19f3c095a71040d4df10d929a45e482_amadey_darkgate_elex_glassworm_luca-stealer_njrat_wannacry.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d19f3c095a71040d4df10d929a45e482_amadey_darkgate_elex_glassworm_luca-stealer_njrat_wannacry
- Size 1.9MB
- SHA256 cca8d9f1fcd64e75c59a1fb519b86b94d7c3d00abb948bfaa4c8725a43638b4c
- MD5 d19f3c095a71040d4df10d929a45e482
- SHA1 719079f37bffcac3befdf8bca976d61ed0d650de
- SHA512 0adb66478d3bced0edc1cf7eae5c48e5a60f944258b284f500c6cf22bba6edac1d282e3b3bb7e729d9fadcb1208bd257984976e8d5ddb0de7d99837d02eccd72
- SSDEEP 49152:HyIO6XrnRNm5zuXp7jRG6wLvSpDiTEh3xTeDB1r:SIOqrRXG6wL6732
- TLSH T11C95CF227E92C0B7E2A70230552EA7BA8AB9B5315B3045C7F38C2A3D5F715C09636777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
Modifies visibility of hidden/system files in Explorer
Executes dropped EXE