General
- Target 2026-07-19_f3a5b8c3a240f93e07b91930f7c12661_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 17.7MB
- Sample260719-zbv1taev71
- SHA256 27a2029144815f809ce31fb42e230c5441f23c9c001a0f79f3f3891e310f051f
- MD5 f3a5b8c3a240f93e07b91930f7c12661
- SHA1 675f8983d49b4e842cad140ff567dde7bcecccb7
- SHA512 72fd1045183f2f5ee0a2c2153df9694ea76a0d45020312598f7dfb83805e92f981908f83af3e68af7f2ffa62abf42708afa6fc6da18a2f3ef5aff23695f5cb0f
- SSDEEP 196608:ShwZi32PVTfYobbrx/NsqXd2VBlfDDAGms4:Syo6PHnbolfXYs4
- TLSH T1601739037EB8D9A6E86FB9B4C858D670ED343C151922661779E0BF1EAE336D06D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_f3a5b8c3a240f93e07b91930f7c12661_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_f3a5b8c3a240f93e07b91930f7c12661_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 17.7MB
- SHA256 27a2029144815f809ce31fb42e230c5441f23c9c001a0f79f3f3891e310f051f
- MD5 f3a5b8c3a240f93e07b91930f7c12661
- SHA1 675f8983d49b4e842cad140ff567dde7bcecccb7
- SHA512 72fd1045183f2f5ee0a2c2153df9694ea76a0d45020312598f7dfb83805e92f981908f83af3e68af7f2ffa62abf42708afa6fc6da18a2f3ef5aff23695f5cb0f
- SSDEEP 196608:ShwZi32PVTfYobbrx/NsqXd2VBlfDDAGms4:Syo6PHnbolfXYs4
- TLSH T1601739037EB8D9A6E86FB9B4C858D670ED343C151922661779E0BF1EAE336D06D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory