General
- Target 2026-08-12_48cf89bf12a21aed8cb1a7a409bda518_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.3MB
- Sample260813-bm61fsxtgz
- SHA256 0391e9e1635cf5aec000cb3a6c2408431a7a631e095cc89d0fc4aca2edc27c85
- MD5 48cf89bf12a21aed8cb1a7a409bda518
- SHA1 23759948d6f8b76b5992d19debaff6e221b46ade
- SHA512 8e5941002b445e08fd59b95096bbe4a4f2b8fe94a6d444073e06d860a0eb9032059cbbeaf23fea61bff71b0046e75c7642047046f9fba5958100cbd0f8f44cfc
- SSDEEP 196608:9axBZ5d154bZc2YwRqXPpkx+nWiRXQg9wnJixTJGDuz2dtRjCC5CJ:96lwZc8okxWFgg9wnw1MtYC5Y
- TLSH T1E9F6F123A341C062D11505B026B617382A746FA61BB4D6DBE7D0FDB5BF317B2AB2720D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-12_48cf89bf12a21aed8cb1a7a409bda518_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_48cf89bf12a21aed8cb1a7a409bda518_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.3MB
- SHA256 0391e9e1635cf5aec000cb3a6c2408431a7a631e095cc89d0fc4aca2edc27c85
- MD5 48cf89bf12a21aed8cb1a7a409bda518
- SHA1 23759948d6f8b76b5992d19debaff6e221b46ade
- SHA512 8e5941002b445e08fd59b95096bbe4a4f2b8fe94a6d444073e06d860a0eb9032059cbbeaf23fea61bff71b0046e75c7642047046f9fba5958100cbd0f8f44cfc
- SSDEEP 196608:9axBZ5d154bZc2YwRqXPpkx+nWiRXQg9wnJixTJGDuz2dtRjCC5CJ:96lwZc8okxWFgg9wnw1MtYC5Y
- TLSH T1E9F6F123A341C062D11505B026B617382A746FA61BB4D6DBE7D0FDB5BF317B2AB2720D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL