General
- Target 2026-07-09_fd8b5b41e26837c3990f54e898637de0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc
- Size 15.8MB
- Sample260709-tglrfady5s
- SHA256 f9ecbd080e642c68760572b27ac233e8bf4a3e28b38eac1303572299f43b6d01
- MD5 fd8b5b41e26837c3990f54e898637de0
- SHA1 559a33b7caefc3fe4849e9e8e3326fc5f6e5f537
- SHA512 17d9bbe965f2085b9fa3188b4f1151faaf1f27cfd3e9207dc73602912a9cef578144525f6d71681ac14b2177eadcf2b12f878bead1011063423c6d09b416d172
- SSDEEP 393216:BJsQXI3kGYtUDCSG/lVCcvwJEKUxqntQbnyd3j:B/qkRUedotUxgtOy3j
- TLSH T1E1F6BEF288305256FE3E4834DEA2AA698D357C091FA08BCF2855B18F67735F7543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_fd8b5b41e26837c3990f54e898637de0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_fd8b5b41e26837c3990f54e898637de0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_fd8b5b41e26837c3990f54e898637de0_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc
- Size 15.8MB
- SHA256 f9ecbd080e642c68760572b27ac233e8bf4a3e28b38eac1303572299f43b6d01
- MD5 fd8b5b41e26837c3990f54e898637de0
- SHA1 559a33b7caefc3fe4849e9e8e3326fc5f6e5f537
- SHA512 17d9bbe965f2085b9fa3188b4f1151faaf1f27cfd3e9207dc73602912a9cef578144525f6d71681ac14b2177eadcf2b12f878bead1011063423c6d09b416d172
- SSDEEP 393216:BJsQXI3kGYtUDCSG/lVCcvwJEKUxqntQbnyd3j:B/qkRUedotUxgtOy3j
- TLSH T1E1F6BEF288305256FE3E4834DEA2AA698D357C091FA08BCF2855B18F67735F7543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE