General
- Target 2026-07-28_5fc7a9956693aa65538fc3ebe4b0ee7f_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_smoke-loader
- Size 30.3MB
- Sample260728-fd2ftsybnd
- SHA256 aa36b1f9bb8ae5a38891454fa84c3917a248d9c6fd59f7682d5e756f2a98eb63
- MD5 5fc7a9956693aa65538fc3ebe4b0ee7f
- SHA1 cc53fd1be86bd2eec9e593c832c7604bb91254f3
- SHA512 efe6787316c5c596fea34f6c760eb18c7229241df9ea8757166bdd8d43317840018a4178b80680ef44b5e9e9de28a6c8605671d4f381aa155274fe9839c600be
- SSDEEP 393216:lPpxbCwjmagYOeI2ptQvAM7NxA9TxtumPKsASt39Wi9YCtJsv6tWKFdu9CJCy:DYwjmaNYKQZN0TxtJKWt33YCvCy
- TLSH T13E67AEA3B652C5B2F5C250BB15ADE63B5738B9240B1545C3B2DC3A1AD5702E23F3BA43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-28_5fc7a9956693aa65538fc3ebe4b0ee7f_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_5fc7a9956693aa65538fc3ebe4b0ee7f_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_5fc7a9956693aa65538fc3ebe4b0ee7f_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_smoke-loader
- Size 30.3MB
- SHA256 aa36b1f9bb8ae5a38891454fa84c3917a248d9c6fd59f7682d5e756f2a98eb63
- MD5 5fc7a9956693aa65538fc3ebe4b0ee7f
- SHA1 cc53fd1be86bd2eec9e593c832c7604bb91254f3
- SHA512 efe6787316c5c596fea34f6c760eb18c7229241df9ea8757166bdd8d43317840018a4178b80680ef44b5e9e9de28a6c8605671d4f381aa155274fe9839c600be
- SSDEEP 393216:lPpxbCwjmagYOeI2ptQvAM7NxA9TxtumPKsASt39Wi9YCtJsv6tWKFdu9CJCy:DYwjmaNYKQZN0TxtJKWt33YCvCy
- TLSH T13E67AEA3B652C5B2F5C250BB15ADE63B5738B9240B1545C3B2DC3A1AD5702E23F3BA43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
UPX dump on OEP (original entry point)