General
- Target 2026-08-07_f9f49ed6726ab4ab56be7e2556ed7be9_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 3.1MB
- Sample260808-aphvzawejd
- SHA256 387de472d08ff0a4e32fbf4a86971056974e409112482c262be898c768b5fc23
- MD5 f9f49ed6726ab4ab56be7e2556ed7be9
- SHA1 c92b9618e2ef786500bd810a531d128d863e8b5f
- SHA512 2a20dbc47863beb19754a4285dd1d75e663414609b74ba24c0369ac831f403b0a81845a49d543dd697e5dbc674c4e6698a6002adba3a1de859431b2f031be24c
- SSDEEP 49152:BmrU3K+k8cJE2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqocSV5Ljp0Uqf4js3:BdkvJE2UgXq9ouFkULGyqobNq1M0
- TLSH T16DE59D22FBD08036D52B12738878966195BAF5742739CFD713985A2EFF601C37E32692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_f9f49ed6726ab4ab56be7e2556ed7be9_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redli.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_f9f49ed6726ab4ab56be7e2556ed7be9_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redli.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_f9f49ed6726ab4ab56be7e2556ed7be9_amadey_darkgate_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 3.1MB
- SHA256 387de472d08ff0a4e32fbf4a86971056974e409112482c262be898c768b5fc23
- MD5 f9f49ed6726ab4ab56be7e2556ed7be9
- SHA1 c92b9618e2ef786500bd810a531d128d863e8b5f
- SHA512 2a20dbc47863beb19754a4285dd1d75e663414609b74ba24c0369ac831f403b0a81845a49d543dd697e5dbc674c4e6698a6002adba3a1de859431b2f031be24c
- SSDEEP 49152:BmrU3K+k8cJE2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqocSV5Ljp0Uqf4js3:BdkvJE2UgXq9ouFkULGyqobNq1M0
- TLSH T16DE59D22FBD08036D52B12738878966195BAF5742739CFD713985A2EFF601C37E32692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory