General
- Target 2026-07-28_7acff32d1e99081b0bafd2a3937e8d4f_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 27.5MB
- Sample260728-fbpn9aybkf
- SHA256 2641ae6cbdafa4d13bdecac8ddac664f1d504938d6f5fd36bdd4f45941ea561d
- MD5 7acff32d1e99081b0bafd2a3937e8d4f
- SHA1 5ce0b0cd18e37aa7c71a351522d5550bb4b6c070
- SHA512 963bf324f9443812b5fc0724d92d4fc4618049cf09e33f2e1d48e5521b7e61b391d1f11a5a772583d0b3125b161eb5113562e04b827fa849745cd709095f2d4c
- SSDEEP 393216:Gx2uaAqzZl49T6YAcWAUWDEqjyvqJnBvjN9uNRVhNsf:Gx8/zZCbAcWtWrpGf/if
- TLSH T150577C1262E98826E1731B379C79DA9469297D201FB4D4DB3B882BCC5D39BC0BE31717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_7acff32d1e99081b0bafd2a3937e8d4f_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_7acff32d1e99081b0bafd2a3937e8d4f_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7acff32d1e99081b0bafd2a3937e8d4f_amadey_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 27.5MB
- SHA256 2641ae6cbdafa4d13bdecac8ddac664f1d504938d6f5fd36bdd4f45941ea561d
- MD5 7acff32d1e99081b0bafd2a3937e8d4f
- SHA1 5ce0b0cd18e37aa7c71a351522d5550bb4b6c070
- SHA512 963bf324f9443812b5fc0724d92d4fc4618049cf09e33f2e1d48e5521b7e61b391d1f11a5a772583d0b3125b161eb5113562e04b827fa849745cd709095f2d4c
- SSDEEP 393216:Gx2uaAqzZl49T6YAcWAUWDEqjyvqJnBvjN9uNRVhNsf:Gx8/zZCbAcWtWrpGf/if
- TLSH T150577C1262E98826E1731B379C79DA9469297D201FB4D4DB3B882BCC5D39BC0BE31717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.