General
- Target 2026-08-12_1b09de32005f74a77238d898a381b84d_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop_vidar
- Size 7.7MB
- Sample260812-tj4p2abl8x
- SHA256 cf6ad83ae3e330099bf02a3c21a0015483fed5e17ea7e56df07789bf6929ef64
- MD5 1b09de32005f74a77238d898a381b84d
- SHA1 37cc874d645ce86638028562df18be110d825d93
- SHA512 266016113b02d86494db50381739f56d2d34670793608ce9c5131f5e0359603dccde34d49e9fd2a9dea1101232bc09be6bae1489d2f0d765893e3ad6472217e3
- SSDEEP 98304:BdkvJE2UgXq9ouFkULGyqobNq1MWkB/qoHMdnJE7hAlKnsz2C2PYd9mUv6qp7hy:BqE2S9+ULdNmJEul4szfmq7hy
- TLSH T1FA869C21FAC5C536E5161172C4689BF584ADFC3083348AC777D47D2ABA702C36E36B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_1b09de32005f74a77238d898a381b84d_amadey_darkgate_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_1b09de32005f74a77238d898a381b84d_amadey_darkgate_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_1b09de32005f74a77238d898a381b84d_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop_vidar
- Size 7.7MB
- SHA256 cf6ad83ae3e330099bf02a3c21a0015483fed5e17ea7e56df07789bf6929ef64
- MD5 1b09de32005f74a77238d898a381b84d
- SHA1 37cc874d645ce86638028562df18be110d825d93
- SHA512 266016113b02d86494db50381739f56d2d34670793608ce9c5131f5e0359603dccde34d49e9fd2a9dea1101232bc09be6bae1489d2f0d765893e3ad6472217e3
- SSDEEP 98304:BdkvJE2UgXq9ouFkULGyqobNq1MWkB/qoHMdnJE7hAlKnsz2C2PYd9mUv6qp7hy:BqE2S9+ULdNmJEul4szfmq7hy
- TLSH T1FA869C21FAC5C536E5161172C4689BF584ADFC3083348AC777D47D2ABA702C36E36B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory