General
- Target 2026-07-02_0cf07c823db374664a2e664bedfd7db0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc
- Size 18.1MB
- Sample260702-1ctd2sb17m
- SHA256 65e9a9e7a07202ddd1efc39225e9f1370e67c07624d664ee10338e3a12394237
- MD5 0cf07c823db374664a2e664bedfd7db0
- SHA1 5073301b704668139414f394e754b1a4596a5110
- SHA512 d098fd21096e757be724b4e61a5de90278c5c2a2e3b4e6103a238877ab4210c27c507e54197cf4ee689bd147c9c040dc8149aea829737114f44a41dc4fa483f0
- SSDEEP 393216:bJsQXI3kGyt+qNxG/lVt+S+JEKUxqnvQbntd78v4Mn/R1Ftj:b/qkv+ux9tUxgvOj7ZM/Lbj
- TLSH T1DE17CEF289705295FE3A4834DEA2AA648D357C091FA0CBCF2858B18F67736F7543D285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-02_0cf07c823db374664a2e664bedfd7db0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0cf07c823db374664a2e664bedfd7db0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0cf07c823db374664a2e664bedfd7db0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc
- Size 18.1MB
- SHA256 65e9a9e7a07202ddd1efc39225e9f1370e67c07624d664ee10338e3a12394237
- MD5 0cf07c823db374664a2e664bedfd7db0
- SHA1 5073301b704668139414f394e754b1a4596a5110
- SHA512 d098fd21096e757be724b4e61a5de90278c5c2a2e3b4e6103a238877ab4210c27c507e54197cf4ee689bd147c9c040dc8149aea829737114f44a41dc4fa483f0
- SSDEEP 393216:bJsQXI3kGyt+qNxG/lVt+S+JEKUxqnvQbntd78v4Mn/R1Ftj:b/qkv+ux9tUxgvOj7ZM/Lbj
- TLSH T1DE17CEF289705295FE3A4834DEA2AA648D357C091FA0CBCF2858B18F67736F7543D285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE