General
- Target 2026-07-10_f77eb5a864a500a193a0a33b0464904e_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_helldown_luca-stealer_njrat_poet-rat
- Size 11.5MB
- Sample260710-qk7arscs61
- SHA256 8cf2ef8c02fac3a4637fd8bd75c44ff3390e95aa26f68c3acbe70de10cdeb86a
- MD5 f77eb5a864a500a193a0a33b0464904e
- SHA1 14ea3d656f08a792640379694f4c6e2754bb9faf
- SHA512 4843e87fef7be7e1f142ff98b6cec75e1c894e682cf4d1056768388ece1b1aa0024656b88dbbd411a2a3bfdbd4b2646e69fe23cc096895090d8e001f1b32c448
- SSDEEP 196608:sFNDTGzhYSoTFh8V2KQqGfyxXIicOExzUx8Bssun3f6B2+ZVoQ0:s3iSSYh8V2KQH6uBsc9kQ0
- TLSH T181C6AE52B285503ED8A70A79482F96A4653FFB723B3249CB27F01E8C8F356C15E39647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_f77eb5a864a500a193a0a33b0464904e_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_helld.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_f77eb5a864a500a193a0a33b0464904e_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_helld.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_f77eb5a864a500a193a0a33b0464904e_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_helldown_luca-stealer_njrat_poet-rat
- Size 11.5MB
- SHA256 8cf2ef8c02fac3a4637fd8bd75c44ff3390e95aa26f68c3acbe70de10cdeb86a
- MD5 f77eb5a864a500a193a0a33b0464904e
- SHA1 14ea3d656f08a792640379694f4c6e2754bb9faf
- SHA512 4843e87fef7be7e1f142ff98b6cec75e1c894e682cf4d1056768388ece1b1aa0024656b88dbbd411a2a3bfdbd4b2646e69fe23cc096895090d8e001f1b32c448
- SSDEEP 196608:sFNDTGzhYSoTFh8V2KQqGfyxXIicOExzUx8Bssun3f6B2+ZVoQ0:s3iSSYh8V2KQH6uBsc9kQ0
- TLSH T181C6AE52B285503ED8A70A79482F96A4653FFB723B3249CB27F01E8C8F356C15E39647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.