General
- Target 2026-07-02_f0e5cc1c7f3de508ed1c6bff9c0389ff_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 10.8MB
- Sample260702-2avprscv5k
- SHA256 e778646ab75c9e1a204ebaf9e19300c4432cdab9fd98be8e5e9c1121f5d9b4de
- MD5 f0e5cc1c7f3de508ed1c6bff9c0389ff
- SHA1 4a94f4db8cb7e117ac59ac1b411306169d4b57a9
- SHA512 3609db0a4f32b30435f79ca075eb22bced68173dfeefb59003bbe8dfcbbdaf53adfd9c7eac1692d4a3adef35c1c3998400f7bc6dc45ac531c18be1b24b13d122
- SSDEEP 49152:JxpM84poxzLrRokpFVZS38xmN3Aek03noj45wlDT3ugx/T3S9tsgX8zEC8ULgCSP:OfkrRokxZaeUJF3noxDDu6/TIOSABd8
- TLSH T1AFB6D3036D7CED6AF96E3EB5C858CA749C183D2969533426B9F4BF5EE4325C13608232
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_f0e5cc1c7f3de508ed1c6bff9c0389ff_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f0e5cc1c7f3de508ed1c6bff9c0389ff_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 10.8MB
- SHA256 e778646ab75c9e1a204ebaf9e19300c4432cdab9fd98be8e5e9c1121f5d9b4de
- MD5 f0e5cc1c7f3de508ed1c6bff9c0389ff
- SHA1 4a94f4db8cb7e117ac59ac1b411306169d4b57a9
- SHA512 3609db0a4f32b30435f79ca075eb22bced68173dfeefb59003bbe8dfcbbdaf53adfd9c7eac1692d4a3adef35c1c3998400f7bc6dc45ac531c18be1b24b13d122
- SSDEEP 49152:JxpM84poxzLrRokpFVZS38xmN3Aek03noj45wlDT3ugx/T3S9tsgX8zEC8ULgCSP:OfkrRokxZaeUJF3noxDDu6/TIOSABd8
- TLSH T1AFB6D3036D7CED6AF96E3EB5C858CA749C183D2969533426B9F4BF5EE4325C13608232
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory