Overview

overview

3

Static

static

1

2026-07-10...os.exe

windows10-2004-x64

3

2026-07-10...os.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-10_84e64a83b7449b1482cb9b6675878a39_amadey_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_remcos
  • Size 4.0MB
  • Sample260710-mc4ywsav4v
  • SHA256 fb92992ebd5aa1b5a23108b27da2d8372bb1aaf883af347081f69e8dcfdb8b1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-07-10_84e64a83b7449b1482cb9b6675878a39_amadey_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_remcos
    .exe 4.0MB

2026-07-10_84e64a83b7449b1482cb9b6675878a39_amadey_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_remcos

  • IMPHASH bed18a2b957cdebbfb77df590636bafc
  • SHA256 fb92992ebd5aa1b5a23108b27da2d8372bb1aaf883af347081f69e8dcfdb8b1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86
Digest
57:f1:f3:c8:ef:e2:cf:32:8a:f3:d3:8b:8e:04:37:c9:bc:21:93:61:8e:e3:90:67:85:b9:e1:a8:3d:cd:2b:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510100MABTJENYXY,CN=成都赤侠信息科技有限公司,O=成都赤侠信息科技有限公司,L=成都市,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c21e68890e983bde9ab98e696b0e68a80e69cafe4baa7e4b89ae5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e59b9be5b79de79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Digest
b2:2b:1f:52:d9:f8:ac:45:69:bf:53:7e:dc:55:0b:70:a3:4e:37:18
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510100MABTJENYXY,CN=成都赤侠信息科技有限公司,O=成都赤侠信息科技有限公司,L=成都市,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c21e68890e983bde9ab98e696b0e68a80e69cafe4baa7e4b89ae5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e59b9be5b79de79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
1
Major OS version
5
Entry point
810534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Jenkins\.jenkins\workspace\halo_install\halo_install\trunk\Release\Uninstall.pdb