General
- Target 2026-07-20_f7b05d046088e8c76f11a515ffa37b2d_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_qakbot_swisyn_wannacry
- Size 3.7MB
- Sample260720-t8besaas2v
- SHA256 f8782c27b2c16f755110d06e2fd42f8aa5561ee16d902c72820be6b8a8fd1f77
- MD5 f7b05d046088e8c76f11a515ffa37b2d
- SHA1 40b952faeb2e144b405c390cb6efd7895a1a0dd2
- SHA512 8a2e07e421f08d7fe1dac9d1242a2d609da43e2dd40bb8e8631fa8f544c793f5587ba9ad4e40b4e4546e9d880eb6c3bebbbabb610e0d39e1764472791fbbd1e2
- SSDEEP 98304:w9lQUdOTGYZLw3gI18aS9hFQMfQZqqA7o:4lQogrpv4ZhAc
- TLSH T1C706BE02B742807AD64101B1C16BABFF6A397D14DF51C4D7E7C43E79B8202E26A3A65F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_f7b05d046088e8c76f11a515ffa37b2d_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_f7b05d046088e8c76f11a515ffa37b2d_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f7b05d046088e8c76f11a515ffa37b2d_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_qakbot_swisyn_wannacry
- Size 3.7MB
- SHA256 f8782c27b2c16f755110d06e2fd42f8aa5561ee16d902c72820be6b8a8fd1f77
- MD5 f7b05d046088e8c76f11a515ffa37b2d
- SHA1 40b952faeb2e144b405c390cb6efd7895a1a0dd2
- SHA512 8a2e07e421f08d7fe1dac9d1242a2d609da43e2dd40bb8e8631fa8f544c793f5587ba9ad4e40b4e4546e9d880eb6c3bebbbabb610e0d39e1764472791fbbd1e2
- SSDEEP 98304:w9lQUdOTGYZLw3gI18aS9hFQMfQZqqA7o:4lQogrpv4ZhAc
- TLSH T1C706BE02B742807AD64101B1C16BABFF6A397D14DF51C4D7E7C43E79B8202E26A3A65F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory