General
- Target 2026-07-14_519fe7bc93127446cc550679182536be_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_wannacry
- Size 9.6MB
- Sample260714-18dcpsex6q
- SHA256 0d86edc399b2f4ed9c4ee4155cf5ec3d4f7f65119779ef7526a1e3e82f8737da
- MD5 519fe7bc93127446cc550679182536be
- SHA1 c79aca9e8a79207db846afbb6d5f4d4660fe59b0
- SHA512 e6eede7d4f4f4ecc808df8d27d5b5d148235bd5de4c63bbc299b59655aa3fbbf1aa767c3f780c1ffe326fa338beb75b49375d031f5c72f670ea1d4dce27669e4
- SSDEEP 196608:62S9+ULdNPtbuPZOOmnqogHh/mPhqD3oR:62SlLdNPt6ROOmqZxMR
- TLSH T1B7A6D02EF7A48232D0739176C895A765E976F05197308BCB1349872CAF336C39A36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_519fe7bc93127446cc550679182536be_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_519fe7bc93127446cc550679182536be_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_wannacry
- Size 9.6MB
- SHA256 0d86edc399b2f4ed9c4ee4155cf5ec3d4f7f65119779ef7526a1e3e82f8737da
- MD5 519fe7bc93127446cc550679182536be
- SHA1 c79aca9e8a79207db846afbb6d5f4d4660fe59b0
- SHA512 e6eede7d4f4f4ecc808df8d27d5b5d148235bd5de4c63bbc299b59655aa3fbbf1aa767c3f780c1ffe326fa338beb75b49375d031f5c72f670ea1d4dce27669e4
- SSDEEP 196608:62S9+ULdNPtbuPZOOmnqogHh/mPhqD3oR:62SlLdNPt6ROOmqZxMR
- TLSH T1B7A6D02EF7A48232D0739176C895A765E976F05197308BCB1349872CAF336C39A36376
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1