General
- Target 2026-08-08_a47687ea2e6673fa3a06b00d2eefa0b2_amadey_darkgate_elex_icedid_luca-stealer_njrat_remcos_vidar
- Size 3.7MB
- Sample260808-v2k63sef48
- SHA256 e9b583c712b78ebaff1fbe11c90ee96972c2f24df340fc3a60c60ba411f6ea88
- MD5 a47687ea2e6673fa3a06b00d2eefa0b2
- SHA1 b2034c26e178d71c2beed245a664f47a79c422ea
- SHA512 24ab8f3c53c62ef847c08a2b199cf7656eefbdf1722e63be3b4a73cbabc4dcdf39113d9933945b01ed72f6cc72a0b1436e77050de3823ed3ef063f38424c007d
- SSDEEP 49152:8DPkB56REPtAxrCcGU8+kB4gb3OP1m8vPHve/idPYuAbRlmZF8gDYf5zaCpXxPuC:8IIxrXGxqvO/cPYMoDw/z
- TLSH T17906F6026BEC0418F5F32B388A7A99509A3BBC560B39D5DF01981D5D0F73AC29D76B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_a47687ea2e6673fa3a06b00d2eefa0b2_amadey_darkgate_elex_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a47687ea2e6673fa3a06b00d2eefa0b2_amadey_darkgate_elex_icedid_luca-stealer_njrat_remcos_vidar
- Size 3.7MB
- SHA256 e9b583c712b78ebaff1fbe11c90ee96972c2f24df340fc3a60c60ba411f6ea88
- MD5 a47687ea2e6673fa3a06b00d2eefa0b2
- SHA1 b2034c26e178d71c2beed245a664f47a79c422ea
- SHA512 24ab8f3c53c62ef847c08a2b199cf7656eefbdf1722e63be3b4a73cbabc4dcdf39113d9933945b01ed72f6cc72a0b1436e77050de3823ed3ef063f38424c007d
- SSDEEP 49152:8DPkB56REPtAxrCcGU8+kB4gb3OP1m8vPHve/idPYuAbRlmZF8gDYf5zaCpXxPuC:8IIxrXGxqvO/cPYMoDw/z
- TLSH T17906F6026BEC0418F5F32B388A7A99509A3BBC560B39D5DF01981D5D0F73AC29D76B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1