General
- Target 2026-08-04_9d0c9f6c69ba37ece74433f49ac1eebc_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 5.5MB
- Sample260804-gvkebasemf
- SHA256 19a20920378362661d3647061a429ce8ad01ea287f5395f3a8c043c8cd2b00d5
- MD5 9d0c9f6c69ba37ece74433f49ac1eebc
- SHA1 1cabcdf1ba62b755b9624404581a1880673aa761
- SHA512 e86bbde48e8498fffc54e3217bb066fce317f40204c162a46d809868b5d6fdba4f4d48db4934d41925d5c5f6628a8fdd0ed15f0fb7fc1ac746de5e55a77089be
- SSDEEP 49152:mtqiKYHrJg1NNNRNNNTONZ/TO98VChBtzysUVap/UkKYHrJg1NNNRNNNTONZ/TOk:JqybtzysiQybtzysi
- TLSH T10246BE00EFA16836FC3645364DAA23764438ED31F74205DFA293FA1E57649F2293729B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9d0c9f6c69ba37ece74433f49ac1eebc_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9d0c9f6c69ba37ece74433f49ac1eebc_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 5.5MB
- SHA256 19a20920378362661d3647061a429ce8ad01ea287f5395f3a8c043c8cd2b00d5
- MD5 9d0c9f6c69ba37ece74433f49ac1eebc
- SHA1 1cabcdf1ba62b755b9624404581a1880673aa761
- SHA512 e86bbde48e8498fffc54e3217bb066fce317f40204c162a46d809868b5d6fdba4f4d48db4934d41925d5c5f6628a8fdd0ed15f0fb7fc1ac746de5e55a77089be
- SSDEEP 49152:mtqiKYHrJg1NNNRNNNTONZ/TO98VChBtzysUVap/UkKYHrJg1NNNRNNNTONZ/TOk:JqybtzysiQybtzysi
- TLSH T10246BE00EFA16836FC3645364DAA23764438ED31F74205DFA293FA1E57649F2293729B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL