General
- Target 2026-08-09_f10c628c8ca1effbdff69fb690e9d29e_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.5MB
- Sample260809-s6tynstwcy
- SHA256 89ad6c40ade8e7f56b7ab69405869334ddc308c74789a6861f7623853c22047f
- MD5 f10c628c8ca1effbdff69fb690e9d29e
- SHA1 4ab487a113607f3f9688699fc60f245fa1b910fe
- SHA512 7b61c449fa8c445051b06563fd73614741f933c0701a312a5baec5595669a278f41fda065c421686b676e3d06501013cc9d2dbe9d896cf13c90b54ba7a60bde7
- SSDEEP 196608:KlXk/eYwRqXPpkx+nWitLyb+Pp+4U8FXQg9wnJO98BSHS0yqEubpk8fm+kPjCso0:KEUokxWZEIfFgg9wnRBiUqE1Gm+kmso0
- TLSH T1B0F6F113A640C062D19A15B122B657382EB85FA11FB8C9DBEBD0FCB57F31AB15A7700D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f10c628c8ca1effbdff69fb690e9d29e_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f10c628c8ca1effbdff69fb690e9d29e_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.5MB
- SHA256 89ad6c40ade8e7f56b7ab69405869334ddc308c74789a6861f7623853c22047f
- MD5 f10c628c8ca1effbdff69fb690e9d29e
- SHA1 4ab487a113607f3f9688699fc60f245fa1b910fe
- SHA512 7b61c449fa8c445051b06563fd73614741f933c0701a312a5baec5595669a278f41fda065c421686b676e3d06501013cc9d2dbe9d896cf13c90b54ba7a60bde7
- SSDEEP 196608:KlXk/eYwRqXPpkx+nWitLyb+Pp+4U8FXQg9wnJO98BSHS0yqEubpk8fm+kPjCso0:KEUokxWZEIfFgg9wnRBiUqE1Gm+kmso0
- TLSH T1B0F6F113A640C062D19A15B122B657382EB85FA11FB8C9DBEBD0FCB57F31AB15A7700D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL