General
- Target 2026-07-28_9a87859c398c2f415bdfc5b2fc1678d3_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 30.5MB
- Sample260728-e8jntsfa37
- SHA256 518afdccc7360bbd7a7455933919fb04d1772612d9e608fba6d5329a083e6b72
- MD5 9a87859c398c2f415bdfc5b2fc1678d3
- SHA1 559d25d2820ba1ec1a45d06ccd5a9c4ba1591789
- SHA512 0e96ddf4c16baf6ad7787b1e5541721ad601891ad2350f5ecafe44fdf24136448409bc347fa85c9c51019c8d6893b1346c4fc208f95864baf2e0536f1bf5c9fd
- SSDEEP 393216:Hhg2uaAq645OxsZ0gesZ0g6pst86tggsgoVRjBrhE9uNRshNsd:Hy8/6U+sOrsODZ62Fhfiid
- TLSH T13F677C0262D58816E1721B379CB9DAA0662A3D601F74D4DF3BC82BC86D79BC0BE71753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_9a87859c398c2f415bdfc5b2fc1678d3_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_9a87859c398c2f415bdfc5b2fc1678d3_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_9a87859c398c2f415bdfc5b2fc1678d3_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 30.5MB
- SHA256 518afdccc7360bbd7a7455933919fb04d1772612d9e608fba6d5329a083e6b72
- MD5 9a87859c398c2f415bdfc5b2fc1678d3
- SHA1 559d25d2820ba1ec1a45d06ccd5a9c4ba1591789
- SHA512 0e96ddf4c16baf6ad7787b1e5541721ad601891ad2350f5ecafe44fdf24136448409bc347fa85c9c51019c8d6893b1346c4fc208f95864baf2e0536f1bf5c9fd
- SSDEEP 393216:Hhg2uaAq645OxsZ0gesZ0g6pst86tggsgoVRjBrhE9uNRshNsd:Hy8/6U+sOrsODZ62Fhfiid
- TLSH T13F677C0262D58816E1721B379CB9DAA0662A3D601F74D4DF3BC82BC86D79BC0BE71753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.