General
- Target 2026-08-11_d662ecd100cabef3c0b63f2c9e6d3386_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 10.1MB
- Sample260811-131wtaztfv
- SHA256 09b348a2846999039fa1f34a299e17cb590427a98949e6a8cb33d6d0553bf615
- MD5 d662ecd100cabef3c0b63f2c9e6d3386
- SHA1 c134a1a822a8f4af1e2396762576fad2b8be21c0
- SHA512 7d8ed9c28e27fec373fc5dd89fd0f842cf1fe1732d541a411037a95357cc954223195a4d2eec2d5c93db36c07246e3c37c0d7c0a52018275c9b0a85ff0a30c45
- SSDEEP 196608:BqE2S9+ULdNsqK2S9+ULdNPtbuPZOOmnqogHh/p:BB2SlLdNNK2SlLdNPt6ROOmqZL
- TLSH T153B6C02EFBD08036D55B227358289261D5BAF534A7398FD723885B1DFB701C36E32296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_d662ecd100cabef3c0b63f2c9e6d3386_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_l.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_d662ecd100cabef3c0b63f2c9e6d3386_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_l.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_d662ecd100cabef3c0b63f2c9e6d3386_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 10.1MB
- SHA256 09b348a2846999039fa1f34a299e17cb590427a98949e6a8cb33d6d0553bf615
- MD5 d662ecd100cabef3c0b63f2c9e6d3386
- SHA1 c134a1a822a8f4af1e2396762576fad2b8be21c0
- SHA512 7d8ed9c28e27fec373fc5dd89fd0f842cf1fe1732d541a411037a95357cc954223195a4d2eec2d5c93db36c07246e3c37c0d7c0a52018275c9b0a85ff0a30c45
- SSDEEP 196608:BqE2S9+ULdNsqK2S9+ULdNPtbuPZOOmnqogHh/p:BB2SlLdNNK2SlLdNPt6ROOmqZL
- TLSH T153B6C02EFBD08036D55B227358289261D5BAF534A7398FD723885B1DFB701C36E32296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory