General
- Target 2026-07-15_717597e7ffa0ee03efc74f9f7f6842e0_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 21.1MB
- Sample260715-jvnsvae12r
- SHA256 5463b5057e325bc6977fee7c7d08b4fa6e5ef6fdcf8dad98af09a29fd7719683
- MD5 717597e7ffa0ee03efc74f9f7f6842e0
- SHA1 bfb327902c1a5b78fcf3df372f62b383214ade63
- SHA512 5e8f6b088d6670f639d88726b03e790836a44bb8dca033ac60e15fd97c7f40cce366ab87ddcebe1336e5030cb8915343089a8f0393ffa054dbda7246f694c0f6
- SSDEEP 393216:0AIHXTqMCZhxR21z0wGQUJ+ciNWtmuuHkZUa+AASnUKF2cOnpF+ra5g:tqWP01z0TJJKemuuHkZcAj7tkpl
- TLSH T124272212F7A2447AC46F427897A79B94633A7003A720CBCF7B8D92281F277E1C936755
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_717597e7ffa0ee03efc74f9f7f6842e0_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_717597e7ffa0ee03efc74f9f7f6842e0_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_717597e7ffa0ee03efc74f9f7f6842e0_amadey_darkgate_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 21.1MB
- SHA256 5463b5057e325bc6977fee7c7d08b4fa6e5ef6fdcf8dad98af09a29fd7719683
- MD5 717597e7ffa0ee03efc74f9f7f6842e0
- SHA1 bfb327902c1a5b78fcf3df372f62b383214ade63
- SHA512 5e8f6b088d6670f639d88726b03e790836a44bb8dca033ac60e15fd97c7f40cce366ab87ddcebe1336e5030cb8915343089a8f0393ffa054dbda7246f694c0f6
- SSDEEP 393216:0AIHXTqMCZhxR21z0wGQUJ+ciNWtmuuHkZUa+AASnUKF2cOnpF+ra5g:tqWP01z0TJJKemuuHkZcAj7tkpl
- TLSH T124272212F7A2447AC46F427897A79B94633A7003A720CBCF7B8D92281F277E1C936755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.