General
- Target 2026-07-15_af491cb3ef0c2ea12caaa9975c60c25a_amadey_darkgate_elex_glassworm_luca-stealer_njrat
- Size 1.9MB
- Sample260715-nnfwwaev8v
- SHA256 fee7a9b0ce6caabae6858aeccc4b5028f583baa3082feef05033a21f8d73d516
- MD5 af491cb3ef0c2ea12caaa9975c60c25a
- SHA1 0b7fe73f700c74cf6b1100b58c66006234fab429
- SHA512 50c0ea82fd4d14544937a68af93d31bd234f8a3b2321ec59d37bbfab97382af1dd5bcc5b986c54aa94aee43e128f44106e1eb0ce6b6765cb33d7b611ccd947e4
- SSDEEP 49152:C0PXJj/+Y323ZLzvsVSMkUrQF/VPrXOonS:NP5b+Y305z6kDio
- TLSH T1CE959E12FFC18DE1E585097150EAA73F8B3AD61C4790CEC3F2865965EC205D2FA3A399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-15_af491cb3ef0c2ea12caaa9975c60c25a_amadey_darkgate_elex_glassworm_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_af491cb3ef0c2ea12caaa9975c60c25a_amadey_darkgate_elex_glassworm_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_af491cb3ef0c2ea12caaa9975c60c25a_amadey_darkgate_elex_glassworm_luca-stealer_njrat
- Size 1.9MB
- SHA256 fee7a9b0ce6caabae6858aeccc4b5028f583baa3082feef05033a21f8d73d516
- MD5 af491cb3ef0c2ea12caaa9975c60c25a
- SHA1 0b7fe73f700c74cf6b1100b58c66006234fab429
- SHA512 50c0ea82fd4d14544937a68af93d31bd234f8a3b2321ec59d37bbfab97382af1dd5bcc5b986c54aa94aee43e128f44106e1eb0ce6b6765cb33d7b611ccd947e4
- SSDEEP 49152:C0PXJj/+Y323ZLzvsVSMkUrQF/VPrXOonS:NP5b+Y305z6kDio
- TLSH T1CE959E12FFC18DE1E585097150EAA73F8B3AD61C4790CEC3F2865965EC205D2FA3A399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects binaries and memory artifacts referencing sandbox product IDs
-
Loads dropped DLL