General
- Target 2026-07-23_d7dcc485e3e0dfdb70bc94c1c827611f_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.4MB
- Sample260723-pyjaescp8z
- SHA256 6ee387c137867a84e33291d1f49731bc0aedb00bbabeff2be7e301e4fa50da21
- MD5 d7dcc485e3e0dfdb70bc94c1c827611f
- SHA1 eb8199ef219adecd1e19b9f0a92cdba861ea4d51
- SHA512 b9eff027adff42b8267468f99990c8f95f114415439d784378b8e57bb03dbf9ca02adb4ef2c97ddf45acedef0a4d510157c8a2c20b05046b66a0c2e02ff79dad
- SSDEEP 196608:PZQzYJnG0+H4U0CXXhg9wn5x4e2buVBRh05a+YwRqXPpkx+nWiGjCXnx1:xQMJlU0Uxg9wn74xb6BYM0okxWLXn3
- TLSH T133F6F113A241C062D11505B022F657382EB8AFA14F79DAEBA7E0FCB5BF317A15A7740D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-23_d7dcc485e3e0dfdb70bc94c1c827611f_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_d7dcc485e3e0dfdb70bc94c1c827611f_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.4MB
- SHA256 6ee387c137867a84e33291d1f49731bc0aedb00bbabeff2be7e301e4fa50da21
- MD5 d7dcc485e3e0dfdb70bc94c1c827611f
- SHA1 eb8199ef219adecd1e19b9f0a92cdba861ea4d51
- SHA512 b9eff027adff42b8267468f99990c8f95f114415439d784378b8e57bb03dbf9ca02adb4ef2c97ddf45acedef0a4d510157c8a2c20b05046b66a0c2e02ff79dad
- SSDEEP 196608:PZQzYJnG0+H4U0CXXhg9wn5x4e2buVBRh05a+YwRqXPpkx+nWiGjCXnx1:xQMJlU0Uxg9wn74xb6BYM0okxWLXn3
- TLSH T133F6F113A241C062D11505B022F657382EB8AFA14F79DAEBA7E0FCB5BF317A15A7740D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL