General
- Target 2026-08-15_f9d392a0008aca73f8c283ca1536eef8_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 12.9MB
- Sample260815-kl49xaeh32
- SHA256 4a38361582d268cda4b49e7141901415c91a194a7adfef76fdedc587607bd4f5
- MD5 f9d392a0008aca73f8c283ca1536eef8
- SHA1 66db36119295615fb7427a839040e1c82800db80
- SHA512 fb9284ab339f251390677de312b37ddd03e1567c38aa017241ebe047859c3527060679fb2220c27dd61d33a22438ab1a9989856a406dc295aca9913c64fa1cc0
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jovMQXdWjo6:ShwZi32PVTfYovMedgo6
- TLSH T1A1D60603AE7CDD6AF87E39B5C854CA749C283D191A237516B9E0BF5EE9335C17A08231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_f9d392a0008aca73f8c283ca1536eef8_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f9d392a0008aca73f8c283ca1536eef8_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 12.9MB
- SHA256 4a38361582d268cda4b49e7141901415c91a194a7adfef76fdedc587607bd4f5
- MD5 f9d392a0008aca73f8c283ca1536eef8
- SHA1 66db36119295615fb7427a839040e1c82800db80
- SHA512 fb9284ab339f251390677de312b37ddd03e1567c38aa017241ebe047859c3527060679fb2220c27dd61d33a22438ab1a9989856a406dc295aca9913c64fa1cc0
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jovMQXdWjo6:ShwZi32PVTfYovMedgo6
- TLSH T1A1D60603AE7CDD6AF87E39B5C854CA749C283D191A237516B9E0BF5EE9335C17A08231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory