General
- Target 2026-07-19_511846a027963e68daeb5ae9988a33a1_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 11.1MB
- Sample260719-2mm6fsev4p
- SHA256 1d11b65c7f1c26e801bad372ab7610a080a0ce4843ae95fa9c0a2972c12cd0e9
- MD5 511846a027963e68daeb5ae9988a33a1
- SHA1 e4964063cfcd1f7563ba4bdc4fcb59080d8c61fd
- SHA512 3abaa192e92c0c53b0b1ae94df09a2b2831fa5fbf37166c45df2286e080b2995f366cc5c28691e3b824a42e7aad69f892bba13acba6de402ded03742cc4b89e4
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6joZBC:ShwZi32PVTfYoZBC
- TLSH T19BC6E503AD7CED2AF96E3DB5C858DA749C183D1969633426B9F0BF5EE4325C17608232
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_511846a027963e68daeb5ae9988a33a1_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_511846a027963e68daeb5ae9988a33a1_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 11.1MB
- SHA256 1d11b65c7f1c26e801bad372ab7610a080a0ce4843ae95fa9c0a2972c12cd0e9
- MD5 511846a027963e68daeb5ae9988a33a1
- SHA1 e4964063cfcd1f7563ba4bdc4fcb59080d8c61fd
- SHA512 3abaa192e92c0c53b0b1ae94df09a2b2831fa5fbf37166c45df2286e080b2995f366cc5c28691e3b824a42e7aad69f892bba13acba6de402ded03742cc4b89e4
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6joZBC:ShwZi32PVTfYoZBC
- TLSH T19BC6E503AD7CED2AF96E3DB5C858DA749C183D1969633426B9F0BF5EE4325C17608232
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory