General
- Target 2026-08-05_dcd305a190b93ba23dfdb1856530c1a1_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 3.0MB
- Sample260805-mtq4cszvax
- SHA256 072c43782bfa2e8ed82883149fcaa4710e45f42ac8b73a4ff7ba044bd5254e12
- MD5 dcd305a190b93ba23dfdb1856530c1a1
- SHA1 bf1c2911d7da2102a61f763b9ccad0e8dfd4b8f9
- SHA512 156b6dfae967b1fe713e946eff444b92d1efab6c1f6108423b21ab1cf896465261f54e004704e7c4da43d53b1a9615a56182216fdf810246ae3526bcf0f8fc81
- SSDEEP 49152:UzYMe3zDJPopicVDBV57oVB4WHRAib2K8LkHO1agQ:H3PZZeDBV5zYZmku
- TLSH T11FE5AD01B36ACB77D24753B908E8E3BB66395C20170746D3B3C82D23B967AD05DB5B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_dcd305a190b93ba23dfdb1856530c1a1_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_dcd305a190b93ba23dfdb1856530c1a1_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_dcd305a190b93ba23dfdb1856530c1a1_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 3.0MB
- SHA256 072c43782bfa2e8ed82883149fcaa4710e45f42ac8b73a4ff7ba044bd5254e12
- MD5 dcd305a190b93ba23dfdb1856530c1a1
- SHA1 bf1c2911d7da2102a61f763b9ccad0e8dfd4b8f9
- SHA512 156b6dfae967b1fe713e946eff444b92d1efab6c1f6108423b21ab1cf896465261f54e004704e7c4da43d53b1a9615a56182216fdf810246ae3526bcf0f8fc81
- SSDEEP 49152:UzYMe3zDJPopicVDBV57oVB4WHRAib2K8LkHO1agQ:H3PZZeDBV5zYZmku
- TLSH T11FE5AD01B36ACB77D24753B908E8E3BB66395C20170746D3B3C82D23B967AD05DB5B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.