General
- Target 2026-07-01_38281b334d502902745dccd3770fd35f_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 21.0MB
- Sample260701-2bf8rsft9l
- SHA256 415f53889fd65ad6ebdee3b3cb0a8f471fbb40a3106bb603a0c2b96fa972df44
- MD5 38281b334d502902745dccd3770fd35f
- SHA1 2acc074c219e01a62985f7944b27afffaf321bea
- SHA512 dc121404925b12bb657cd7ce9451fab43d912e4f7b39e1befd9eb9c543e21c5144b3279efc43ec97ec90fed64d389c805d1e97ad77959c41b8b9fb1865a7dd6b
- SSDEEP 393216:YAIKXTqMCZhxR21z0wGQUJ+ciXWomuuHkZUa+AASnUKF2cOnpF+ra5Y:htWP01z0TJJKhmuuHkZcAj7tkpl
- TLSH T149272302F7A64436C4AF423897A7AA94663A7403A720CBCF7B8C922C1F177E1DD35B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_38281b334d502902745dccd3770fd35f_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_38281b334d502902745dccd3770fd35f_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_38281b334d502902745dccd3770fd35f_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 21.0MB
- SHA256 415f53889fd65ad6ebdee3b3cb0a8f471fbb40a3106bb603a0c2b96fa972df44
- MD5 38281b334d502902745dccd3770fd35f
- SHA1 2acc074c219e01a62985f7944b27afffaf321bea
- SHA512 dc121404925b12bb657cd7ce9451fab43d912e4f7b39e1befd9eb9c543e21c5144b3279efc43ec97ec90fed64d389c805d1e97ad77959c41b8b9fb1865a7dd6b
- SSDEEP 393216:YAIKXTqMCZhxR21z0wGQUJ+ciXWomuuHkZUa+AASnUKF2cOnpF+ra5Y:htWP01z0TJJKhmuuHkZcAj7tkpl
- TLSH T149272302F7A64436C4AF423897A7AA94663A7403A720CBCF7B8C922C1F177E1DD35B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.