General
- Target 2026-08-12_d0846d9d35ac7acff0e16ca2c1a3fcfc_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.5MB
- Sample260813-adezyavzdw
- SHA256 f0a13e327e34b5e845db66caad98c4c23c5704a6bbe7af5f76c0223449523757
- MD5 d0846d9d35ac7acff0e16ca2c1a3fcfc
- SHA1 c11ccb2a288ad7cff68abc5d149fbf7cbc9dd4b0
- SHA512 ec03c119361974e8905d2b4c35aa7add81df2687b7d5f79c88858d4c0cd00357fc34ecd208ae6fb8c474cc015c3a801e393af49cd388b4da53f0bab54e963092
- SSDEEP 393216:UW4okxWINsjUvmxcZgg9wn7IWa3HYLGhL:UWnHIzma6go7IWVLGN
- TLSH T182F6F123A241C072D25515B022B657382EB89FA20FB9CADBE7D0FCA56F357A15B7700D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-12_d0846d9d35ac7acff0e16ca2c1a3fcfc_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_d0846d9d35ac7acff0e16ca2c1a3fcfc_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.5MB
- SHA256 f0a13e327e34b5e845db66caad98c4c23c5704a6bbe7af5f76c0223449523757
- MD5 d0846d9d35ac7acff0e16ca2c1a3fcfc
- SHA1 c11ccb2a288ad7cff68abc5d149fbf7cbc9dd4b0
- SHA512 ec03c119361974e8905d2b4c35aa7add81df2687b7d5f79c88858d4c0cd00357fc34ecd208ae6fb8c474cc015c3a801e393af49cd388b4da53f0bab54e963092
- SSDEEP 393216:UW4okxWINsjUvmxcZgg9wn7IWa3HYLGhL:UWnHIzma6go7IWVLGN
- TLSH T182F6F123A241C072D25515B022B657382EB89FA20FB9CADBE7D0FCA56F357A15B7700D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL