General
- Target 2026-08-02_1903a844d92a034d1ed0b0c3e14488e9_amadey_darkgate_elex_gcleaner_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 55.6MB
- Sample260803-a5jgfavfqc
- SHA256 3099e619bffff42f4acc09f1d148b7cefe4ea9e6909606c1780ed72f0f957519
- MD5 1903a844d92a034d1ed0b0c3e14488e9
- SHA1 1a649fd01da590e0fe80e691cb51f6d8cb284069
- SHA512 02f59b68e22ce52c5ce5de1d2e04ccf535186a1b2e4b9c48426ab295ce3c0171430187ac2a4f531e7dbde5e9358c0c0c712a80d66be55d99d9503e82495001ee
- SSDEEP 786432:eIONSkuec5p9ChQDBbFCLig8TSN0JXZSrXYOewtoE++gJu:KSF76hqtFCem0XSrXYOewtoE++gJu
- TLSH T13CD7E1217E88017BE4AB173086B6A7B9E63EFD50673586CB52907A0DDD327C01E36763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_1903a844d92a034d1ed0b0c3e14488e9_amadey_darkgate_elex_gcleaner_glassworm_hijackloader_ice.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_1903a844d92a034d1ed0b0c3e14488e9_amadey_darkgate_elex_gcleaner_glassworm_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_1903a844d92a034d1ed0b0c3e14488e9_amadey_darkgate_elex_gcleaner_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 55.6MB
- SHA256 3099e619bffff42f4acc09f1d148b7cefe4ea9e6909606c1780ed72f0f957519
- MD5 1903a844d92a034d1ed0b0c3e14488e9
- SHA1 1a649fd01da590e0fe80e691cb51f6d8cb284069
- SHA512 02f59b68e22ce52c5ce5de1d2e04ccf535186a1b2e4b9c48426ab295ce3c0171430187ac2a4f531e7dbde5e9358c0c0c712a80d66be55d99d9503e82495001ee
- SSDEEP 786432:eIONSkuec5p9ChQDBbFCLig8TSN0JXZSrXYOewtoE++gJu:KSF76hqtFCem0XSrXYOewtoE++gJu
- TLSH T13CD7E1217E88017BE4AB173086B6A7B9E63EFD50673586CB52907A0DDD327C01E36763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Suspicious use of SetThreadContext