General
- Target 2026-08-09_f26430ce547522b7f3190a299ff89d3e_amadey_darkgate_elex_expiro_hijackloader_luca-stealer_mespinoza_njrat
- Size 1.8MB
- Sample260809-s5989shl7y
- SHA256 c20fe9e3c08ddd4df35a20b45c0c4b4e3c5755f55fb0bfe74a116401fbbd606f
- MD5 f26430ce547522b7f3190a299ff89d3e
- SHA1 107ca504ed1f5debbe001c597cc8a23e1744a486
- SHA512 88c45f8a48d0bc97372911ec49474b7f295b41d6728cbd30952636ec3f5f766ae7472512249983b19029d72d9204e1cf839c187c431b1eeed6ac5418792eee3b
- SSDEEP 24576:RjnT6k9lPBtwC7KEg6hMLFMGyY9xSosZ9T74yU6TsqjnhMgeiCl7G0nehbGZpbD:R/lPBqC7KKYFBcZJ7L1Dmg27RnWGj
- TLSH T14895E010B591E036D4032132526DF33DAA39AA064F308ED7D3C99DACAFB51D15E366AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f26430ce547522b7f3190a299ff89d3e_amadey_darkgate_elex_expiro_hijackloader_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_f26430ce547522b7f3190a299ff89d3e_amadey_darkgate_elex_expiro_hijackloader_luca-stealer_mespinoza_njrat.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f26430ce547522b7f3190a299ff89d3e_amadey_darkgate_elex_expiro_hijackloader_luca-stealer_mespinoza_njrat
- Size 1.8MB
- SHA256 c20fe9e3c08ddd4df35a20b45c0c4b4e3c5755f55fb0bfe74a116401fbbd606f
- MD5 f26430ce547522b7f3190a299ff89d3e
- SHA1 107ca504ed1f5debbe001c597cc8a23e1744a486
- SHA512 88c45f8a48d0bc97372911ec49474b7f295b41d6728cbd30952636ec3f5f766ae7472512249983b19029d72d9204e1cf839c187c431b1eeed6ac5418792eee3b
- SSDEEP 24576:RjnT6k9lPBtwC7KEg6hMLFMGyY9xSosZ9T74yU6TsqjnhMgeiCl7G0nehbGZpbD:R/lPBqC7KKYFBcZJ7L1Dmg27RnWGj
- TLSH T14895E010B591E036D4032132526DF33DAA39AA064F308ED7D3C99DACAFB51D15E366AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory