General
- Target 2026-07-01_0f2310ecac4db06cb9cc1d503be24a0d_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260701-v187hscy8t
- SHA256 3d1c14001929d2806a212c2936d2916f5918dc2261493579fe5086e1669a47a4
- MD5 0f2310ecac4db06cb9cc1d503be24a0d
- SHA1 f8e09337265c083b81686b7c5a20662e8c13e462
- SHA512 4fd54cdbb60e6a70c96b2429b63a21a663ff57ec305fa3338fd02f4a4bb97b6b0e62c559af3b3b77553939049be15ac2d2b5c0c8881fa6e8779ea6c6effb5777
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51it:GDkpzl84UkTcpUjX1it
- TLSH T1B1F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0f2310ecac4db06cb9cc1d503be24a0d_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0f2310ecac4db06cb9cc1d503be24a0d_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0f2310ecac4db06cb9cc1d503be24a0d_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 3d1c14001929d2806a212c2936d2916f5918dc2261493579fe5086e1669a47a4
- MD5 0f2310ecac4db06cb9cc1d503be24a0d
- SHA1 f8e09337265c083b81686b7c5a20662e8c13e462
- SHA512 4fd54cdbb60e6a70c96b2429b63a21a663ff57ec305fa3338fd02f4a4bb97b6b0e62c559af3b3b77553939049be15ac2d2b5c0c8881fa6e8779ea6c6effb5777
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51it:GDkpzl84UkTcpUjX1it
- TLSH T1B1F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory