General
- Target 2026-07-11_f6588bfdccc8dbd79c91dd89fc5aa76d_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_play_remcos
- Size 9.5MB
- Sample260711-c6e7hscy4y
- SHA256 9e373ab1ef37148b865c5e038c47cb3d149b8dee8282e46b9084a455e219aaf3
- MD5 f6588bfdccc8dbd79c91dd89fc5aa76d
- SHA1 1a130011d9f557a08cf85076ace5f320ed5492a4
- SHA512 bcfe4c92453623a0ef9c3570b05316f8f7a3e3b50c23145e491f0f5a93c72195f3a9bd4b03dc880ba838d9df041b2e4918c6d28ec489cd26b2bc1e8032eaf4be
- SSDEEP 196608:44Wz6H5RMAWMcr21n9Mnal0dI/ldcxGd9JmGCIzy/T/3dw:nl5RMM+219MnaeVyTsIzy7fdw
- TLSH T154A62215E483C823D76E5930E5A0D94CF914227C8FB655F337B996348C63EF2A0B998E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_f6588bfdccc8dbd79c91dd89fc5aa76d_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_play_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_f6588bfdccc8dbd79c91dd89fc5aa76d_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_play_remcos.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_f6588bfdccc8dbd79c91dd89fc5aa76d_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_play_remcos
- Size 9.5MB
- SHA256 9e373ab1ef37148b865c5e038c47cb3d149b8dee8282e46b9084a455e219aaf3
- MD5 f6588bfdccc8dbd79c91dd89fc5aa76d
- SHA1 1a130011d9f557a08cf85076ace5f320ed5492a4
- SHA512 bcfe4c92453623a0ef9c3570b05316f8f7a3e3b50c23145e491f0f5a93c72195f3a9bd4b03dc880ba838d9df041b2e4918c6d28ec489cd26b2bc1e8032eaf4be
- SSDEEP 196608:44Wz6H5RMAWMcr21n9Mnal0dI/ldcxGd9JmGCIzy/T/3dw:nl5RMM+219MnaeVyTsIzy7fdw
- TLSH T154A62215E483C823D76E5930E5A0D94CF914227C8FB655F337B996348C63EF2A0B998E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Adds policy Run key to start application
-
Executes dropped EXE
-
Loads dropped DLL