2026-06-29_516c0a9ce90256aabcfc70a023bed36b_darkgate_elex_gcleaner_icedid_njrat_stealc

General

Target
2026-06-29_516c0a9ce90256aabcfc70a023bed36b_darkgate_elex_gcleaner_icedid_njrat_stealc
Size 11.2MB
Sample260630-lp88psct4l
SHA256 fa733768ebec4a4cde594fb12e9858b9c3c0ff25cde61e0e7df53abd7b23e0fa
MD5 516c0a9ce90256aabcfc70a023bed36b
SHA1 a687d40101b91805cb228022e3f90a9dd36ca761
SHA512 a37a44788639811367577a1220733aca5f5c83e04232e38937a4ebf6502152cd244635a3026632a22dbfcda79343836079f56988c8b50e577d361093bffff14b
SSDEEP 196608:JBo1mF2oXI3kG9t6sktx+hBt+kN4ByQyVG/uzGNVy6+MUGxqjz:bosYII3kG5t+RNSG/lVCLSOz
TLSH
T18FC69CF6883152A2FE7E4C35DE61AE688D31B8091F90DBCB2855708E67736F7643D284
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

installer

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_516c0a9ce90256aabcfc70a023bed36b_darkgate_elex_gcleaner_icedid_njrat_stealc

Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

Inno Setup installer

resource	yara_rule
sample	innosetup

2026-06-29_516c0a9ce90256aabcfc70a023bed36b_darkgate_elex_gcleaner_icedid_njrat_stealc

.exe 11.2MB

IMPHASH 5d6cad172c5535e4b6b6bbd246571621
SHA256 fa733768ebec4a4cde594fb12e9858b9c3c0ff25cde61e0e7df53abd7b23e0fa
MD5 516c0a9ce90256aabcfc70a023bed36b
SHA1 a687d40101b91805cb228022e3f90a9dd36ca761
SHA512 a37a44788639811367577a1220733aca5f5c83e04232e38937a4ebf6502152cd244635a3026632a22dbfcda79343836079f56988c8b50e577d361093bffff14b
SSDEEP 196608:JBo1mF2oXI3kG9t6sktx+hBt+kN4ByQyVG/uzGNVy6+MUGxqjz:bosYII3kG5t+RNSG/lVCLSOz
TLSH
T18FC69CF6883152A2FE7E4C35DE61AE688D31B8091F90DBCB2855708E67736F7643D284
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
Unsigned PE

Checks for missing Authenticode signature.
Inno Setup is an open-source installation builder for Windows applications.

Inno Setup installer

installer

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths