General
- Target 2026-08-07_93900cc9cbd1d191113f258af92ae9a8_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_ransomhub_remcos
- Size 2.6MB
- Sample260807-p5dzaaytct
- SHA256 39581bde9cfcd2edf9f37d7ca849eed9a495f1b5ef901d35908fa66b8b5d9708
- MD5 93900cc9cbd1d191113f258af92ae9a8
- SHA1 6d0104967e4349515904c01cf9355699ec1670c6
- SHA512 3bc2f788779d4c8072a98016c24da86994529bf8b587fbdd06fca9e089ebedc1d8f15b4e45a113e147179fe12267ba882df9c2d814ad14e1e4803a89d1dd2676
- SSDEEP 49152:cfktngGf7a2R0TpS4o9dEN9TpUzoER+9SUsdjLTnG:HZgGWTTpe97oERej
- TLSH T1BBC5C0127390C0F6D1530D7069BCABAA95B9BE705A2185C3B3C03E1D69B0AD3E535E6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_93900cc9cbd1d191113f258af92ae9a8_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_ransomhub_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_93900cc9cbd1d191113f258af92ae9a8_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_ransomhub_remcos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_93900cc9cbd1d191113f258af92ae9a8_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_ransomhub_remcos
- Size 2.6MB
- SHA256 39581bde9cfcd2edf9f37d7ca849eed9a495f1b5ef901d35908fa66b8b5d9708
- MD5 93900cc9cbd1d191113f258af92ae9a8
- SHA1 6d0104967e4349515904c01cf9355699ec1670c6
- SHA512 3bc2f788779d4c8072a98016c24da86994529bf8b587fbdd06fca9e089ebedc1d8f15b4e45a113e147179fe12267ba882df9c2d814ad14e1e4803a89d1dd2676
- SSDEEP 49152:cfktngGf7a2R0TpS4o9dEN9TpUzoER+9SUsdjLTnG:HZgGWTTpe97oERej
- TLSH T1BBC5C0127390C0F6D1530D7069BCABAA95B9BE705A2185C3B3C03E1D69B0AD3E535E6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.