General
- Target 2026-07-20_88541977d237248930c3832c9d476572_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luca-stealer_njrat_plugx_remcos_smoke-loader
- Size 19.6MB
- Sample260720-ddh85sc19p
- SHA256 5b54ff45af259c36df84503104a265a668143ed53fb85979977e03fe5903df23
- MD5 88541977d237248930c3832c9d476572
- SHA1 fa9519176d243d7c74b0844e7d6c8f6bd856a7b3
- SHA512 30f9d2d18d40b0384296148d7fb5eec679cd457e15d9ca07cad5cb483bdb4568947d05195b821af279677892ba706da88a05b0b5a708cdd12195c667c82fc55b
- SSDEEP 393216:EO1nCiPCOAUD3P/ouwT3fTQW6OKEIrqNp/8a9EhI1O:EONPPCOl7CvMOKEaa9EhI1
- TLSH T19527CF02FAC240F9C45B01B2652EF37FDB397E244728C6E3DBE42F15A9B139059AA157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_88541977d237248930c3832c9d476572_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_88541977d237248930c3832c9d476572_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luc.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_88541977d237248930c3832c9d476572_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luca-stealer_njrat_plugx_remcos_smoke-loader
- Size 19.6MB
- SHA256 5b54ff45af259c36df84503104a265a668143ed53fb85979977e03fe5903df23
- MD5 88541977d237248930c3832c9d476572
- SHA1 fa9519176d243d7c74b0844e7d6c8f6bd856a7b3
- SHA512 30f9d2d18d40b0384296148d7fb5eec679cd457e15d9ca07cad5cb483bdb4568947d05195b821af279677892ba706da88a05b0b5a708cdd12195c667c82fc55b
- SSDEEP 393216:EO1nCiPCOAUD3P/ouwT3fTQW6OKEIrqNp/8a9EhI1O:EONPPCOl7CvMOKEaa9EhI1
- TLSH T19527CF02FAC240F9C45B01B2652EF37FDB397E244728C6E3DBE42F15A9B139059AA157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables using Telegram Chat Bot
-
Loads dropped DLL