General
- Target 2026-07-01_480178c130c5e051ed55957b16d874a3_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260701-x8m1csdv2p
- SHA256 6fc0f4bb42f62a692fab31837e5c3d89ec6b53de8d4d948fa4b0ffd27e0bbb56
- MD5 480178c130c5e051ed55957b16d874a3
- SHA1 c692244ddc6a5be43ca13e85c077a388397985d8
- SHA512 c424ab83ef7e55c5f0d62f316930ac8ed837365a5be512ffb22d8d6d735ab8ddd9276fb6bd1a517959972cca33240451c7bd408c37adcebfc0b8cd6b3258c359
- SSDEEP 49152:GD5a5Hg7bV4UxExTTo6TkUEmT5xxvRCI51i6:GD5a5H84UkTcpUjX1i6
- TLSH T1AAF56D13BEC04032EAB70670A87BBB51557ABE209F1364CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_480178c130c5e051ed55957b16d874a3_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_480178c130c5e051ed55957b16d874a3_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_480178c130c5e051ed55957b16d874a3_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 6fc0f4bb42f62a692fab31837e5c3d89ec6b53de8d4d948fa4b0ffd27e0bbb56
- MD5 480178c130c5e051ed55957b16d874a3
- SHA1 c692244ddc6a5be43ca13e85c077a388397985d8
- SHA512 c424ab83ef7e55c5f0d62f316930ac8ed837365a5be512ffb22d8d6d735ab8ddd9276fb6bd1a517959972cca33240451c7bd408c37adcebfc0b8cd6b3258c359
- SSDEEP 49152:GD5a5Hg7bV4UxExTTo6TkUEmT5xxvRCI51i6:GD5a5H84UkTcpUjX1i6
- TLSH T1AAF56D13BEC04032EAB70670A87BBB51557ABE209F1364CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables packed with Dotfuscator
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory