General
- Target 2026-08-09_32cf2c302fdf87c82caaf3fcd3327156_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- Sample260809-xck6wsbr8t
- SHA256 a3edd5fcbf07b3962b96120334721354671378b92a2531e7b490968b34f7c48f
- MD5 32cf2c302fdf87c82caaf3fcd3327156
- SHA1 cc14ed5068cb7e4e5158886bdb5e6b5078cfbd4a
- SHA512 a8f1fd062c1423d3d15899ae2f6a4cfef25ed0430a5dd9b64ffc3d4a95c8c25795190e8e7a0dd206c158b864ae3fbe72d5e4eadde830a9bf40916e8786096fe9
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcyfx3yJ+KGxr2c9u4:CQ9NHcBWeFXOlRjRQJglrU4
- TLSH T1EEA6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_32cf2c302fdf87c82caaf3fcd3327156_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_32cf2c302fdf87c82caaf3fcd3327156_amadey_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 9.6MB
- SHA256 a3edd5fcbf07b3962b96120334721354671378b92a2531e7b490968b34f7c48f
- MD5 32cf2c302fdf87c82caaf3fcd3327156
- SHA1 cc14ed5068cb7e4e5158886bdb5e6b5078cfbd4a
- SHA512 a8f1fd062c1423d3d15899ae2f6a4cfef25ed0430a5dd9b64ffc3d4a95c8c25795190e8e7a0dd206c158b864ae3fbe72d5e4eadde830a9bf40916e8786096fe9
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcyfx3yJ+KGxr2c9u4:CQ9NHcBWeFXOlRjRQJglrU4
- TLSH T1EEA6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Suspicious use of SetThreadContext