General
- Target 2026-08-10_8c181ff5e822f967b00a9d119d051d0a_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_tofsee
- Size 6.9MB
- Sample260810-e3cnbsar9z
- SHA256 1292a65761b80fe5572d04c249294d8039e13b84df820c29ac3df56c0b0cecd9
- MD5 8c181ff5e822f967b00a9d119d051d0a
- SHA1 4413ffc5484458728525ac887fc9759e0dddec31
- SHA512 a9dd8552fdfde0a9317262ee6ac0a5c25d733300d973d84d2857d957687b295b4af28a9d4afb04ada8631709d0b6f1e6d9687de704b2eb456483fb41dada83bb
- SSDEEP 98304:1eujz2I2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlf:1eumI2S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T12B76E02EFB808036D65B127358289321D67AF564E329DFC72788975DFB702C36E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_8c181ff5e822f967b00a9d119d051d0a_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_8c181ff5e822f967b00a9d119d051d0a_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8c181ff5e822f967b00a9d119d051d0a_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_tofsee
- Size 6.9MB
- SHA256 1292a65761b80fe5572d04c249294d8039e13b84df820c29ac3df56c0b0cecd9
- MD5 8c181ff5e822f967b00a9d119d051d0a
- SHA1 4413ffc5484458728525ac887fc9759e0dddec31
- SHA512 a9dd8552fdfde0a9317262ee6ac0a5c25d733300d973d84d2857d957687b295b4af28a9d4afb04ada8631709d0b6f1e6d9687de704b2eb456483fb41dada83bb
- SSDEEP 98304:1eujz2I2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlf:1eumI2S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T12B76E02EFB808036D65B127358289321D67AF564E329DFC72788975DFB702C36E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory