General
- Target 2026-08-08_f9befd1a2d96846f804239e7542db1ad_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar
- Size 16.8MB
- Sample260808-nf1ajsek6w
- SHA256 572f15dc5d6e95facc8d18d9e9198e4653cdb061b1cbe47c3544b03372609f1f
- MD5 f9befd1a2d96846f804239e7542db1ad
- SHA1 dac281d54359d0d39982e2f691fc248165752268
- SHA512 160b1835680c71baa05dc3fbc740316537a975034c6ea7851602e6cac8309825e31349c94d93c3449d9c28c7909918b0d70865817cf5566de95b89ef35da31ef
- SSDEEP 196608:ybDSuQIGSU9IjJxB2plTf4eGZF6bUpMBF1p/kjRm4OWi2bz:y3SuQIGSU9IjJj2pJEIbUwF1VERmj2bz
- TLSH T16D07AFD123E7F12ECE3B053447396AB57520DEA12761CE7761A0F6B88833A45652FE23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_f9befd1a2d96846f804239e7542db1ad_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_f9befd1a2d96846f804239e7542db1ad_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar
- Size 16.8MB
- SHA256 572f15dc5d6e95facc8d18d9e9198e4653cdb061b1cbe47c3544b03372609f1f
- MD5 f9befd1a2d96846f804239e7542db1ad
- SHA1 dac281d54359d0d39982e2f691fc248165752268
- SHA512 160b1835680c71baa05dc3fbc740316537a975034c6ea7851602e6cac8309825e31349c94d93c3449d9c28c7909918b0d70865817cf5566de95b89ef35da31ef
- SSDEEP 196608:ybDSuQIGSU9IjJxB2plTf4eGZF6bUpMBF1p/kjRm4OWi2bz:y3SuQIGSU9IjJj2pJEIbUwF1VERmj2bz
- TLSH T16D07AFD123E7F12ECE3B053447396AB57520DEA12761CE7761A0F6B88833A45652FE23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory