General
- Target 2026-08-07_d03b72960308a9f7ffedbbb5bdc7d79c_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- Sample260807-lt3lqafb45
- SHA256 5b5d243574c526160ebd3c4888eab1e6b67af4a3360499d1b1ad9f6e263b3e99
- MD5 d03b72960308a9f7ffedbbb5bdc7d79c
- SHA1 320feee0403a24951d6b640ad77450435f42bc2d
- SHA512 0dd04494329cf86f455f285a4b0bf6c33731d604e18869cf27cb40f8351eebf4d477d2a1d01d73ee0ffbfa5938a088a6f58a91b255d5ac2a0c6fa50c9dd0f51e
- SSDEEP 24576:EJsQEZ11A3tQ47Z3MvNq+ftTuADXH2eKRNG8w8ISlYVfFCxBjk2kGi05aHSDw/F:/6l2HTX2esfwCsqoaaHSDwd
- TLSH T1D865CF11BBC24471F19201B502AEE73ABF39B2516725CACBC3E0DC6459622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_d03b72960308a9f7ffedbbb5bdc7d79c_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_d03b72960308a9f7ffedbbb5bdc7d79c_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.45.241:4444
Targets
-
- Target 2026-08-07_d03b72960308a9f7ffedbbb5bdc7d79c_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- SHA256 5b5d243574c526160ebd3c4888eab1e6b67af4a3360499d1b1ad9f6e263b3e99
- MD5 d03b72960308a9f7ffedbbb5bdc7d79c
- SHA1 320feee0403a24951d6b640ad77450435f42bc2d
- SHA512 0dd04494329cf86f455f285a4b0bf6c33731d604e18869cf27cb40f8351eebf4d477d2a1d01d73ee0ffbfa5938a088a6f58a91b255d5ac2a0c6fa50c9dd0f51e
- SSDEEP 24576:EJsQEZ11A3tQ47Z3MvNq+ftTuADXH2eKRNG8w8ISlYVfFCxBjk2kGi05aHSDw/F:/6l2HTX2esfwCsqoaaHSDwd
- TLSH T1D865CF11BBC24471F19201B502AEE73ABF39B2516725CACBC3E0DC6459622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.