General
- Target 2026-08-01_529b0e19409aa2879c528b678be98508_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- Sample260801-m3738stbmc
- SHA256 7e7abd5f6a5207e870dddad88da942e4309facc9b07fd0c39c051ad54b01a308
- MD5 529b0e19409aa2879c528b678be98508
- SHA1 34fbd01bbc67763f2644cddcb3beb6205756338c
- SHA512 607eb8f510ced9628207714fe346f1879a812120aecc3f9c03413f8a50817ab9a31f539f0a8f0bda97d7969535eede721377f2bd235b57851c19c0277ed5f403
- SSDEEP 24576:9JsQEZ11A3tQ47Z3MvNq+ftTuADXH2eKwNG8w8ISlYVfFCxBjk2kGi05aHSDw/F:06l2HTX2elfwCsqoaaHSDwd
- TLSH T1DF65CF11BBC24471F19201B502AEE73ABE39B2516725CACBC3E0DC645D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_529b0e19409aa2879c528b678be98508_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_529b0e19409aa2879c528b678be98508_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.45.222:4444
Targets
-
- Target 2026-08-01_529b0e19409aa2879c528b678be98508_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- SHA256 7e7abd5f6a5207e870dddad88da942e4309facc9b07fd0c39c051ad54b01a308
- MD5 529b0e19409aa2879c528b678be98508
- SHA1 34fbd01bbc67763f2644cddcb3beb6205756338c
- SHA512 607eb8f510ced9628207714fe346f1879a812120aecc3f9c03413f8a50817ab9a31f539f0a8f0bda97d7969535eede721377f2bd235b57851c19c0277ed5f403
- SSDEEP 24576:9JsQEZ11A3tQ47Z3MvNq+ftTuADXH2eKwNG8w8ISlYVfFCxBjk2kGi05aHSDw/F:06l2HTX2elfwCsqoaaHSDwd
- TLSH T1DF65CF11BBC24471F19201B502AEE73ABE39B2516725CACBC3E0DC645D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.