General
- Target 2026-08-15_f029cf9e6a1c4959ab72783c7f177bbd_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 11.5MB
- Sample260815-knqjjasepd
- SHA256 c9ffe3058346cbf9b923e20baacdafc85e76dc550a9e9078cda13c0d55b14571
- MD5 f029cf9e6a1c4959ab72783c7f177bbd
- SHA1 ff87c4ceb5396541e8a6610ce8c4b5d0cc452d81
- SHA512 9acef3c3b562077ff77dc0fe8ad31b1d14945825d85ca459a7defe063457b62fd13bf4c20892e64404ddeb799a52296a6a1f8038410ee11617f4ec5e9b10a2aa
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jorjon:ShwZi32PVTfYofon
- TLSH T19CC6F603AD7CDD2AF97E39F5C858DA749C283D196A633452B9E0BF5EE8325C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_f029cf9e6a1c4959ab72783c7f177bbd_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f029cf9e6a1c4959ab72783c7f177bbd_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop
- Size 11.5MB
- SHA256 c9ffe3058346cbf9b923e20baacdafc85e76dc550a9e9078cda13c0d55b14571
- MD5 f029cf9e6a1c4959ab72783c7f177bbd
- SHA1 ff87c4ceb5396541e8a6610ce8c4b5d0cc452d81
- SHA512 9acef3c3b562077ff77dc0fe8ad31b1d14945825d85ca459a7defe063457b62fd13bf4c20892e64404ddeb799a52296a6a1f8038410ee11617f4ec5e9b10a2aa
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jorjon:ShwZi32PVTfYofon
- TLSH T19CC6F603AD7CDD2AF97E39F5C858DA749C283D196A633452B9E0BF5EE8325C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory