Overview

overview

7

Static

static

4

2026-08-08...li.exe

windows10-2004-x64

7

2026-08-08...li.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-08_4c4ad6850ea2c6563f6f9b44af095d43_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
  • Size 39.8MB
  • Sample260808-wjvs8sbl5v
  • SHA256 77b05dd7a05e6169d849aa164e227673cd69b113f7263312fd41e513e501d9ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-08_4c4ad6850ea2c6563f6f9b44af095d43_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
    .exe 39.8MB

2026-08-08_4c4ad6850ea2c6563f6f9b44af095d43_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop

  • IMPHASH 08da5ec80406581b76eae64d14e4f631
  • SHA256 77b05dd7a05e6169d849aa164e227673cd69b113f7263312fd41e513e501d9ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • HTTP links in PDF interactive object

    Detects HTTP links in interactive objects within PDF files.

    pdflink

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
5
Entry point
18871
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths