General
- Target 2026-07-05_939e8b3640abbce4405db5ce8e911be7_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 6.9MB
- Sample260705-fle8kahx8t
- SHA256 0112cf46578d0b265c2e76d356c9d120273aa2a4d940e00f0f3a099845943a33
- MD5 939e8b3640abbce4405db5ce8e911be7
- SHA1 a46812762ea17a761824a054e261ec4184c02d70
- SHA512 06623b7c4a511bd0fac3c6bb70279f1fe82fa9b2e46cc861a65d51df9a169c159c22daf80cf2bf885acdf8e19bde56dfe9083e9a1c82fbe83d8fde76b707ebd5
- SSDEEP 196608:njBxcO4Vja2S9+ULdNPtbuPZOOmnqogHh/1:Xh2SlLdNPt6ROOmqZL
- TLSH T13276E02EFB854036D95B12725828A332D579F524E3258FC763889B1DFB712C36E36293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_939e8b3640abbce4405db5ce8e911be7_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_939e8b3640abbce4405db5ce8e911be7_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_939e8b3640abbce4405db5ce8e911be7_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 6.9MB
- SHA256 0112cf46578d0b265c2e76d356c9d120273aa2a4d940e00f0f3a099845943a33
- MD5 939e8b3640abbce4405db5ce8e911be7
- SHA1 a46812762ea17a761824a054e261ec4184c02d70
- SHA512 06623b7c4a511bd0fac3c6bb70279f1fe82fa9b2e46cc861a65d51df9a169c159c22daf80cf2bf885acdf8e19bde56dfe9083e9a1c82fbe83d8fde76b707ebd5
- SSDEEP 196608:njBxcO4Vja2S9+ULdNPtbuPZOOmnqogHh/1:Xh2SlLdNPt6ROOmqZL
- TLSH T13276E02EFB854036D95B12725828A332D579F524E3258FC763889B1DFB712C36E36293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory