General
- Target 2026-08-05_e4fef712b7864a218aa7911b2dcdcddb_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- Sample260805-ms8xsazvav
- SHA256 7ab3347fb75945c48396ea3d4e77ec86bd11df57784907f3b265e853c61c2213
- MD5 e4fef712b7864a218aa7911b2dcdcddb
- SHA1 8fae5d32a20b8f3ccc960700663fec75124eec03
- SHA512 a8fa2c8f0cd85bf0fbaf975c20cb13e1e9af6c5f12677d01958b318c08ea1793b3711bd0ea5e8d78cea26113bfa39fee205ffdd851826e4d303a9f330f516213
- SSDEEP 24576:1JsQEZ11A3tQ47Z3MvNq+ftTuADEH2eKhNG8w8ISlYVfFCxBjk2kGi05aHSDw/Fc:c6l2HTQ2egfwCsqoaaHSDwd
- TLSH T1B465DF11BAC24471F19201B502AEE73ABF39B2516725CACBC7E0DC245D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e4fef712b7864a218aa7911b2dcdcddb_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e4fef712b7864a218aa7911b2dcdcddb_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.45.202:443
Targets
-
- Target 2026-08-05_e4fef712b7864a218aa7911b2dcdcddb_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- SHA256 7ab3347fb75945c48396ea3d4e77ec86bd11df57784907f3b265e853c61c2213
- MD5 e4fef712b7864a218aa7911b2dcdcddb
- SHA1 8fae5d32a20b8f3ccc960700663fec75124eec03
- SHA512 a8fa2c8f0cd85bf0fbaf975c20cb13e1e9af6c5f12677d01958b318c08ea1793b3711bd0ea5e8d78cea26113bfa39fee205ffdd851826e4d303a9f330f516213
- SSDEEP 24576:1JsQEZ11A3tQ47Z3MvNq+ftTuADEH2eKhNG8w8ISlYVfFCxBjk2kGi05aHSDw/Fc:c6l2HTQ2egfwCsqoaaHSDwd
- TLSH T1B465DF11BAC24471F19201B502AEE73ABF39B2516725CACBC7E0DC245D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.