General
- Target 2026-08-10_c5a2769ca18908696622ac752bba2d01_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- Sample260810-cdarbshj8w
- SHA256 858c74539101edbf2332d0182f6593d26ed974bfc706ae0e739c508d18306e0c
- MD5 c5a2769ca18908696622ac752bba2d01
- SHA1 1f839017ed7a35c2ff27f077030e99654f05e7ba
- SHA512 2442c8047659b0ab22f1fdae677ee8111f681147c53ed9bba744be9c8c2e335623a17421700c4d4ecaea3f9efc983e0d65af3862864704a47516848dc4572166
- SSDEEP 24576:QJsQEZ11A3tQ47Z3MvNq+ftTuADXt2eKhNG8w8ISlYVfFCxBjk2kGi05aHSDw/Fz:76l2HTd2egfwCsqoaaHSDwdz
- TLSH T19465DF11BBC24471F19201B502AAE73ABF39B2516725CACBC3E0DC245D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c5a2769ca18908696622ac752bba2d01_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_c5a2769ca18908696622ac752bba2d01_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.1.157:4444
Targets
-
- Target 2026-08-10_c5a2769ca18908696622ac752bba2d01_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- SHA256 858c74539101edbf2332d0182f6593d26ed974bfc706ae0e739c508d18306e0c
- MD5 c5a2769ca18908696622ac752bba2d01
- SHA1 1f839017ed7a35c2ff27f077030e99654f05e7ba
- SHA512 2442c8047659b0ab22f1fdae677ee8111f681147c53ed9bba744be9c8c2e335623a17421700c4d4ecaea3f9efc983e0d65af3862864704a47516848dc4572166
- SSDEEP 24576:QJsQEZ11A3tQ47Z3MvNq+ftTuADXt2eKhNG8w8ISlYVfFCxBjk2kGi05aHSDw/Fz:76l2HTd2egfwCsqoaaHSDwdz
- TLSH T19465DF11BBC24471F19201B502AAE73ABF39B2516725CACBC3E0DC245D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.