General
- Target 2026-07-11_5907fd83a843e990923a67c9771ddfba_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry
- Size 4.8MB
- Sample260711-twp3eaez8l
- SHA256 17329c5d211ff15a96e25da8e1ff07dc2c85f7ea458db293bfee258b886c045b
- MD5 5907fd83a843e990923a67c9771ddfba
- SHA1 8c87026b445ddb3cd5b9ced5de9215164efaad8b
- SHA512 d48068ec0b484927d382489c1a4a37b41ff0eb9699cdd5b0b7bbcb1dc9da02529378c97837fcca32614517493758585ea1d8977f80e35a32ba434783c228f982
- SSDEEP 98304:njBxcO4EYmCLxwpP3MPydXPYJ5lCXd/rJKj75O0AoO0WAXfGWe/9Mo/LduyD2pQ:njBxcO4WCLxe3MPyNYJ5lCXdDJU1O050
- TLSH T180364A0AD343C1B1E92304B17A0FF7FA49147D345621888BF7D4AF58A7B2DE66A25723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_5907fd83a843e990923a67c9771ddfba_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_5907fd83a843e990923a67c9771ddfba_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_5907fd83a843e990923a67c9771ddfba_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_vidar_wannacry
- Size 4.8MB
- SHA256 17329c5d211ff15a96e25da8e1ff07dc2c85f7ea458db293bfee258b886c045b
- MD5 5907fd83a843e990923a67c9771ddfba
- SHA1 8c87026b445ddb3cd5b9ced5de9215164efaad8b
- SHA512 d48068ec0b484927d382489c1a4a37b41ff0eb9699cdd5b0b7bbcb1dc9da02529378c97837fcca32614517493758585ea1d8977f80e35a32ba434783c228f982
- SSDEEP 98304:njBxcO4EYmCLxwpP3MPydXPYJ5lCXd/rJKj75O0AoO0WAXfGWe/9Mo/LduyD2pQ:njBxcO4WCLxe3MPyNYJ5lCXdDJU1O050
- TLSH T180364A0AD343C1B1E92304B17A0FF7FA49147D345621888BF7D4AF58A7B2DE66A25723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory