General
- Target 2026-08-06_9347d2ad0ea9b7f379912fe0ec7d2361_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 4.0MB
- Sample260806-skamxaae96
- SHA256 9ea2c94c4a6cbe8fbb51f47bae11d1999fda8c5433055a504300d4955c86e23a
- MD5 9347d2ad0ea9b7f379912fe0ec7d2361
- SHA1 37ede5c364b35b06d0b0585c4c040556015bfd17
- SHA512 51af7c0a9d04b8a5c5e869f6f8590a025316831beed72f6a65276e6f38cf87aca5b9623a2dd693c4b66e1f05b935edc3a4a7b193faf386d5e56d68869b535d3d
- SSDEEP 98304:BdkvJE2UgXq9ouFkULGyqobNq1MhKRuy5ae:BqE2S9+ULdNxqv
- TLSH T10E16AE22FBD08032D56B2132487C967599BAF5301739CFDB13985A2EEF605C36E36396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_9347d2ad0ea9b7f379912fe0ec7d2361_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redli.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_9347d2ad0ea9b7f379912fe0ec7d2361_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redli.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_9347d2ad0ea9b7f379912fe0ec7d2361_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 4.0MB
- SHA256 9ea2c94c4a6cbe8fbb51f47bae11d1999fda8c5433055a504300d4955c86e23a
- MD5 9347d2ad0ea9b7f379912fe0ec7d2361
- SHA1 37ede5c364b35b06d0b0585c4c040556015bfd17
- SHA512 51af7c0a9d04b8a5c5e869f6f8590a025316831beed72f6a65276e6f38cf87aca5b9623a2dd693c4b66e1f05b935edc3a4a7b193faf386d5e56d68869b535d3d
- SSDEEP 98304:BdkvJE2UgXq9ouFkULGyqobNq1MhKRuy5ae:BqE2S9+ULdNxqv
- TLSH T10E16AE22FBD08032D56B2132487C967599BAF5301739CFDB13985A2EEF605C36E36396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory