General
- Target 2026-07-20_7c696f57324ec50ab06be7c0f28b3dcb_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 10.9MB
- Sample260720-x1ghlscy5m
- SHA256 df03f112777c962deb0698b9bf7fb1d902a5c647a00d824789fbea20cad0e4f3
- MD5 7c696f57324ec50ab06be7c0f28b3dcb
- SHA1 385c8258a3ad5aa362d124700810fefa46f69a22
- SHA512 d28fa9df99c41724950f16af0b9612fb02227ecfb5ad3acc0a75ed1a9083f71c747228ee3d91430874925fc595f7d65aae26e0490599dbef5a82bda22cb0ec16
- SSDEEP 49152:JxpM84poxzLrRokpFVZS38xmN3Aek03noj45wlDT3ugx/T3S9tsgX8zEC8ULgCSq:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo5
- TLSH T186B6D503AD7CED2AF96E3DB5C858DA749C183D2969633426B9F0BF5EE4325C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_7c696f57324ec50ab06be7c0f28b3dcb_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_7c696f57324ec50ab06be7c0f28b3dcb_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 10.9MB
- SHA256 df03f112777c962deb0698b9bf7fb1d902a5c647a00d824789fbea20cad0e4f3
- MD5 7c696f57324ec50ab06be7c0f28b3dcb
- SHA1 385c8258a3ad5aa362d124700810fefa46f69a22
- SHA512 d28fa9df99c41724950f16af0b9612fb02227ecfb5ad3acc0a75ed1a9083f71c747228ee3d91430874925fc595f7d65aae26e0490599dbef5a82bda22cb0ec16
- SSDEEP 49152:JxpM84poxzLrRokpFVZS38xmN3Aek03noj45wlDT3ugx/T3S9tsgX8zEC8ULgCSq:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo5
- TLSH T186B6D503AD7CED2AF96E3DB5C858DA749C183D2969633426B9F0BF5EE4325C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory