General
- Target 2026-07-23_3575ac6cc27ac42eb7667139bdb949eb_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 5.9MB
- Sample260723-ebf7fadn2s
- SHA256 be4bf0f3e00525ec1020ce0ad3aed1a1cd8f03c1628717645b23d9a7ba984c28
- MD5 3575ac6cc27ac42eb7667139bdb949eb
- SHA1 bf0a969c6a264f1a9749983e74765a5a1bee2467
- SHA512 71fd8ee625d22a7e40b520e58db5bd6e57c84054dcb0d2768ce09130c67dfb20addcd2d8a4a1d84304d3c602781a5504287f446771a2c8323fef6546970e6632
- SSDEEP 49152:FNJQeM0MfGt1NNNRNNNy49NUJ67B/TO98VChBtzysUVap/UU8hoD1/TO98VChBtg:OeXnMbtzysiU8hjbtzysi6XL
- TLSH T19B56BE00AFA16836FD2685750DEA23664038FD31F39205DF9383F61E57619F22A3779A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_3575ac6cc27ac42eb7667139bdb949eb_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_3575ac6cc27ac42eb7667139bdb949eb_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 5.9MB
- SHA256 be4bf0f3e00525ec1020ce0ad3aed1a1cd8f03c1628717645b23d9a7ba984c28
- MD5 3575ac6cc27ac42eb7667139bdb949eb
- SHA1 bf0a969c6a264f1a9749983e74765a5a1bee2467
- SHA512 71fd8ee625d22a7e40b520e58db5bd6e57c84054dcb0d2768ce09130c67dfb20addcd2d8a4a1d84304d3c602781a5504287f446771a2c8323fef6546970e6632
- SSDEEP 49152:FNJQeM0MfGt1NNNRNNNy49NUJ67B/TO98VChBtzysUVap/UU8hoD1/TO98VChBtg:OeXnMbtzysiU8hjbtzysi6XL
- TLSH T19B56BE00AFA16836FD2685750DEA23664038FD31F39205DF9383F61E57619F22A3779A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL