General
- Target 2026-07-15_a51bb3dec84d56cf1f610b522a24c8ea_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- Sample260715-lkyleacs71
- SHA256 fc579ea7c8f2db1b3f2658aa39f77247329c960d4957da0e838359d5c1ce5f93
- MD5 a51bb3dec84d56cf1f610b522a24c8ea
- SHA1 97ade81e56bef4b1ff2108b5d8fd17cb26429a5a
- SHA512 267c182cfd3bf7061e6542d058a7d555312ea5aad599c3d964ad0d28e359c2d782dc6e2d993517f4ffbd5312d1cab74521e608dd7df6b06f8576e661f921d0e3
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcDfx3yJ+KGxr2csuA:CQ9NHcBWeFXOlRjQQJglr3A
- TLSH T138A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_a51bb3dec84d56cf1f610b522a24c8ea_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_a51bb3dec84d56cf1f610b522a24c8ea_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- SHA256 fc579ea7c8f2db1b3f2658aa39f77247329c960d4957da0e838359d5c1ce5f93
- MD5 a51bb3dec84d56cf1f610b522a24c8ea
- SHA1 97ade81e56bef4b1ff2108b5d8fd17cb26429a5a
- SHA512 267c182cfd3bf7061e6542d058a7d555312ea5aad599c3d964ad0d28e359c2d782dc6e2d993517f4ffbd5312d1cab74521e608dd7df6b06f8576e661f921d0e3
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcDfx3yJ+KGxr2csuA:CQ9NHcBWeFXOlRjQQJglr3A
- TLSH T138A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Suspicious use of SetThreadContext