General
- Target 2026-07-26_6ba07d7f47fc544249e66a05c0fbce36_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.8MB
- Sample260726-mkjb6asyc1
- SHA256 aef6b1d87daed7686977d503bec5ca7eec64231bef0d363af2c4b797de903011
- MD5 6ba07d7f47fc544249e66a05c0fbce36
- SHA1 ae3cd1b649a50beb19beef782bfcea309aa0614e
- SHA512 cac5708cb981ff7de3ccc6d44851dee9e1a2e4e0e9347be4a5fda1f4438c48f3073fecc6953b9c0547e73f509a01e2545cc81458716d6163307fba9a2df5907e
- SSDEEP 49152:o6l2HTX2egfwrsqoaaHSDwdvzqoaaHSDwt:ZlE2e6HtGWHtG
- TLSH T15895D011BAC24471F19205B502AEE73ABF3971506725CACBC3E0DC6859613E2E93F75E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-26_6ba07d7f47fc544249e66a05c0fbce36_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_6ba07d7f47fc544249e66a05c0fbce36_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
192.168.1.16:1212
Targets
-
- Target 2026-07-26_6ba07d7f47fc544249e66a05c0fbce36_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.8MB
- SHA256 aef6b1d87daed7686977d503bec5ca7eec64231bef0d363af2c4b797de903011
- MD5 6ba07d7f47fc544249e66a05c0fbce36
- SHA1 ae3cd1b649a50beb19beef782bfcea309aa0614e
- SHA512 cac5708cb981ff7de3ccc6d44851dee9e1a2e4e0e9347be4a5fda1f4438c48f3073fecc6953b9c0547e73f509a01e2545cc81458716d6163307fba9a2df5907e
- SSDEEP 49152:o6l2HTX2egfwrsqoaaHSDwdvzqoaaHSDwt:ZlE2e6HtGWHtG
- TLSH T15895D011BAC24471F19205B502AEE73ABF3971506725CACBC3E0DC6859613E2E93F75E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.