General
- Target 2026-07-23_718bd54bca82f9e882e31ba86b1a287b_amadey_darkgate_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 6.1MB
- Sample260723-bm147syepc
- SHA256 619b74774e150e51ed08bfbbb8a5f9ade3c874d6300fffc57fd47b9be7b4b011
- MD5 718bd54bca82f9e882e31ba86b1a287b
- SHA1 0368083b682a36c94fafcc918419caa1ddde8e73
- SHA512 f022cfaff215c27124b4184b60a7513ea6bc8f3c5056ca2e5cf58ebdb207e98bc5937b0ff359ec02f07d46c70d51fb49b1ba32738cd4102cd1d02d588398ad87
- SSDEEP 49152:s+8HrJU2nTXIlRgEXgcvDkT6oh5y+y1r2Mfmc2CLdKL7/qFLG32RJfl:KHrJU2nTXIlRgEdDk3y+O42KLbqF3
- TLSH T10E56E012A7FD0408F9F36B799B3ED8558A3BBC661938E55D00582C4D0E73A429DB2F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_718bd54bca82f9e882e31ba86b1a287b_amadey_darkgate_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_718bd54bca82f9e882e31ba86b1a287b_amadey_darkgate_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_718bd54bca82f9e882e31ba86b1a287b_amadey_darkgate_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 6.1MB
- SHA256 619b74774e150e51ed08bfbbb8a5f9ade3c874d6300fffc57fd47b9be7b4b011
- MD5 718bd54bca82f9e882e31ba86b1a287b
- SHA1 0368083b682a36c94fafcc918419caa1ddde8e73
- SHA512 f022cfaff215c27124b4184b60a7513ea6bc8f3c5056ca2e5cf58ebdb207e98bc5937b0ff359ec02f07d46c70d51fb49b1ba32738cd4102cd1d02d588398ad87
- SSDEEP 49152:s+8HrJU2nTXIlRgEXgcvDkT6oh5y+y1r2Mfmc2CLdKL7/qFLG32RJfl:KHrJU2nTXIlRgEdDk3y+O42KLbqF3
- TLSH T10E56E012A7FD0408F9F36B799B3ED8558A3BBC661938E55D00582C4D0E73A429DB2F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory