General
- Target 2026-07-20_32b2a31367f0bfdad765fcc23f8c61af_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 10.9MB
- Sample260720-wjvs8sb16s
- SHA256 c49ae24b354dcf35a88899219b2173e9aa4efaff063fd970a67c5e94608db853
- MD5 32b2a31367f0bfdad765fcc23f8c61af
- SHA1 05480f9fc500cc499d7c88d9b4b50eeeb50223dc
- SHA512 9332fba9c22f219e4a85adaef5fb5e9b598e2a50ae83281048d0fc92c15e025c9ca7adfe18c8c6cc380a8c22bcfa27469c979d2cfa2a5c4f9762e26f06926b58
- SSDEEP 49152:JxpM84poxzLrRokpFVZS38xmN3Aek03noj45wlDT3ugx/T3S9tsgX8zEC8ULgCSZ:OfkrRokxZaeUJF3noxDDu6/TIOSA6joy
- TLSH T1F1B6D503AD7CED2AF96E3DB5C858DA749C183D2969633426B9F0BF5EE4325C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_32b2a31367f0bfdad765fcc23f8c61af_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_32b2a31367f0bfdad765fcc23f8c61af_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 10.9MB
- SHA256 c49ae24b354dcf35a88899219b2173e9aa4efaff063fd970a67c5e94608db853
- MD5 32b2a31367f0bfdad765fcc23f8c61af
- SHA1 05480f9fc500cc499d7c88d9b4b50eeeb50223dc
- SHA512 9332fba9c22f219e4a85adaef5fb5e9b598e2a50ae83281048d0fc92c15e025c9ca7adfe18c8c6cc380a8c22bcfa27469c979d2cfa2a5c4f9762e26f06926b58
- SSDEEP 49152:JxpM84poxzLrRokpFVZS38xmN3Aek03noj45wlDT3ugx/T3S9tsgX8zEC8ULgCSZ:OfkrRokxZaeUJF3noxDDu6/TIOSA6joy
- TLSH T1F1B6D503AD7CED2AF96E3DB5C858DA749C183D2969633426B9F0BF5EE4325C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory