General
- Target 2026-08-05_56ddab32d69d8156575f0e2343f8c719_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 2.9MB
- Sample260805-hszlwsfd33
- SHA256 63b8d318b686e95e4bf2527917604a1bda9686e0333adfd380ac36270c73d3f5
- MD5 56ddab32d69d8156575f0e2343f8c719
- SHA1 7fe9ef2b7a949148eb097db75e99566a58522c48
- SHA512 ec50b30d374b63cd2c10c3308da3c1fce256fe76e90213629446650bd0aa45390bb5636702805d24a128115c24b0bb909a28104db05a011562ea6ce886046cf6
- SSDEEP 49152:ppMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcawYl0UMRlT:w/h4tZNh7XExcawt
- TLSH T1FFE59EB07598C852E512247E65B53A94402CE8E6E7B104CFBFC03DA47636AD3F93A367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_56ddab32d69d8156575f0e2343f8c719_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_nym.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_56ddab32d69d8156575f0e2343f8c719_amadey_darkgate_elex_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 2.9MB
- SHA256 63b8d318b686e95e4bf2527917604a1bda9686e0333adfd380ac36270c73d3f5
- MD5 56ddab32d69d8156575f0e2343f8c719
- SHA1 7fe9ef2b7a949148eb097db75e99566a58522c48
- SHA512 ec50b30d374b63cd2c10c3308da3c1fce256fe76e90213629446650bd0aa45390bb5636702805d24a128115c24b0bb909a28104db05a011562ea6ce886046cf6
- SSDEEP 49152:ppMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcawYl0UMRlT:w/h4tZNh7XExcawt
- TLSH T1FFE59EB07598C852E512247E65B53A94402CE8E6E7B104CFBFC03DA47636AD3F93A367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory