General
- Target 2026-07-08_6e36f00bf823562665a8988c8e1becfa_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- Sample260708-2b647aay8y
- SHA256 27fd28241bb5ee3348563e0267e2c83d6d873d77bdb88111ea0ea08f9ed239e4
- MD5 6e36f00bf823562665a8988c8e1becfa
- SHA1 82eb42fcb2cf43a51806e8b2d81dc217be65848b
- SHA512 c040bcdc6277d4880f3d531fddb7a2053eb9154668714ca55c1c02ecfbfda6d4ce83dfc241e7e54a25a955443afc0cecd4b2d4bf6e518adedb0a2a2cc21f3e86
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcafx3yJ+KGxr2ctuF:CQ9NHcBWeFXOlRjBQJglrkF
- TLSH T1C6A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_6e36f00bf823562665a8988c8e1becfa_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_6e36f00bf823562665a8988c8e1becfa_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- SHA256 27fd28241bb5ee3348563e0267e2c83d6d873d77bdb88111ea0ea08f9ed239e4
- MD5 6e36f00bf823562665a8988c8e1becfa
- SHA1 82eb42fcb2cf43a51806e8b2d81dc217be65848b
- SHA512 c040bcdc6277d4880f3d531fddb7a2053eb9154668714ca55c1c02ecfbfda6d4ce83dfc241e7e54a25a955443afc0cecd4b2d4bf6e518adedb0a2a2cc21f3e86
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcafx3yJ+KGxr2ctuF:CQ9NHcBWeFXOlRjBQJglrkF
- TLSH T1C6A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Suspicious use of SetThreadContext