General
- Target 2026-07-30_f2ebc99e4dd2d4d8b7f2dc59d30b8fd3_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc_vidar
- Size 18.6MB
- Sample260730-bd91rahg58
- SHA256 aca7b42c1648e7e5e232920c337b146175b454bff498ccd202ef16ba30b30c9e
- MD5 f2ebc99e4dd2d4d8b7f2dc59d30b8fd3
- SHA1 30a457a8f167acd26e942ec5a2dfe9c76da60231
- SHA512 9b63c9cdc3b6a7b22730e20db1b495509cd0101f106891d42d188e75b586acb10b5b5159a7be87d93b4d5fe07acd0ed844a51eeea172e75ab7620e41d3137bf5
- SSDEEP 196608:UNfIOAZfeTLx3Ohq0Ytzn7OBdzIkRnyrQAH5+sM3TKn:UNfIL80hMtz7oZIkByrQo5QTS
- TLSH T14717D01A6F6405B6C07B923D9A574A43E37678861370AEE706F81D311F97BE05B3E382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_f2ebc99e4dd2d4d8b7f2dc59d30b8fd3_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f2ebc99e4dd2d4d8b7f2dc59d30b8fd3_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_f2ebc99e4dd2d4d8b7f2dc59d30b8fd3_darkgate_elex_gcleaner_glassworm_icedid_njrat_stealc_vidar
- Size 18.6MB
- SHA256 aca7b42c1648e7e5e232920c337b146175b454bff498ccd202ef16ba30b30c9e
- MD5 f2ebc99e4dd2d4d8b7f2dc59d30b8fd3
- SHA1 30a457a8f167acd26e942ec5a2dfe9c76da60231
- SHA512 9b63c9cdc3b6a7b22730e20db1b495509cd0101f106891d42d188e75b586acb10b5b5159a7be87d93b4d5fe07acd0ed844a51eeea172e75ab7620e41d3137bf5
- SSDEEP 196608:UNfIOAZfeTLx3Ohq0Ytzn7OBdzIkRnyrQAH5+sM3TKn:UNfIL80hMtz7oZIkByrQo5QTS
- TLSH T14717D01A6F6405B6C07B923D9A574A43E37678861370AEE706F81D311F97BE05B3E382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
detects Windows exceutables potentially bypassing UAC using eventvwr.exe
-
Executes dropped EXE
-
Checks whether UAC is enabled