General

  • Target
    2026-07-20_32b2a31367f0bfdad765fcc23f8c61af_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
  • Size 10.9MB
  • Sample260720-wjvs8sb16s
  • SHA256 c49ae24b354dcf35a88899219b2173e9aa4efaff063fd970a67c5e94608db853
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-07-20_32b2a31367f0bfdad765fcc23f8c61af_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
    • Size 10.9MB
    • SHA256 c49ae24b354dcf35a88899219b2173e9aa4efaff063fd970a67c5e94608db853
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects executables containing URLs to raw contents of a Github gist

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks