General
- Target 2026-07-14_112cdb5fd90ff44faad501e9d9a51ea4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- Sample260714-e546csgw2x
- SHA256 6d98ffdd5f10300209ce1094c4a7d0b09617558637a202885d8292c79752fcd0
- MD5 112cdb5fd90ff44faad501e9d9a51ea4
- SHA1 26f9d957b0caaa7ff55e210630f42ffa9764bc7b
- SHA512 3701896b7682bf04b888f7950b1382e81144af1d69e40c0604a9e6ca54ee0599f86022b3816b00cb56257c900194450c8e9d4e36e80f65dac4997ee6af6d1764
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51i3:GDkpzl84UkTcpUjX1i3
- TLSH T128F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-14_112cdb5fd90ff44faad501e9d9a51ea4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_112cdb5fd90ff44faad501e9d9a51ea4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_112cdb5fd90ff44faad501e9d9a51ea4_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys
- Size 3.4MB
- SHA256 6d98ffdd5f10300209ce1094c4a7d0b09617558637a202885d8292c79752fcd0
- MD5 112cdb5fd90ff44faad501e9d9a51ea4
- SHA1 26f9d957b0caaa7ff55e210630f42ffa9764bc7b
- SHA512 3701896b7682bf04b888f7950b1382e81144af1d69e40c0604a9e6ca54ee0599f86022b3816b00cb56257c900194450c8e9d4e36e80f65dac4997ee6af6d1764
- SSDEEP 49152:GDkpzlg7bV4UxExTTo6TkUEmT5xxvRCI51i3:GDkpzl84UkTcpUjX1i3
- TLSH T128F56D13BEC08032EAB70670A87BBB50557A7E209F1365CF7BC47A2E1C716D1A972746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory