General
- Target 2026-08-02_e466effc94c7b3c722e8c145eed6f1d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- Sample260802-mlvfta1bka
- SHA256 1ab4ba3a49de75d52d481bbcf1a2c3c2194132f76baa71740ad984ed6bf07f45
- MD5 e466effc94c7b3c722e8c145eed6f1d0
- SHA1 7df5233d77642d3caf3e38a1aaa0239113595067
- SHA512 d3b0de565799ee5ec175d58a646f3a326abac0b040efaed6569006daa81e1dee949a65c6876155adcaf6ea18eed91057291bb853333562025960542c8ec342a6
- SSDEEP 24576:zJsQEZ11A3tQ47Z3MvNq+ftTuADXH2eK3NG8w8ISlYVfFCxBjk2kGi05aHSDw/F:u6l2HTX2e+fwCsqoaaHSDwd
- TLSH T14965DF11BAC24471F19201B502AEE73ABF39B2516725CACBC3E0DC645D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_e466effc94c7b3c722e8c145eed6f1d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_e466effc94c7b3c722e8c145eed6f1d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
10.13.88.50:443
Targets
-
- Target 2026-08-02_e466effc94c7b3c722e8c145eed6f1d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- SHA256 1ab4ba3a49de75d52d481bbcf1a2c3c2194132f76baa71740ad984ed6bf07f45
- MD5 e466effc94c7b3c722e8c145eed6f1d0
- SHA1 7df5233d77642d3caf3e38a1aaa0239113595067
- SHA512 d3b0de565799ee5ec175d58a646f3a326abac0b040efaed6569006daa81e1dee949a65c6876155adcaf6ea18eed91057291bb853333562025960542c8ec342a6
- SSDEEP 24576:zJsQEZ11A3tQ47Z3MvNq+ftTuADXH2eK3NG8w8ISlYVfFCxBjk2kGi05aHSDw/F:u6l2HTX2e+fwCsqoaaHSDwd
- TLSH T14965DF11BAC24471F19201B502AEE73ABF39B2516725CACBC3E0DC645D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.