General
- Target 2026-08-15_cbacd218a5495a033bc27a6f6554cc54_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 11.3MB
- Sample260815-kvsbpssfpe
- SHA256 431704b56a31c464b0a20eb9551f20712c6ebd3d4451d7b21754ea18e3f63fe7
- MD5 cbacd218a5495a033bc27a6f6554cc54
- SHA1 7dce770bd3ca648b919095d1ef840af6e17cbfcc
- SHA512 cf7879ba392bd36f7f8db3c8cde043e93beee0f2a32b4ea328c50a916663e84ae8dc9bdd9f0da9489364e44f9a886572ad02b00c9d6bdbc1301bd4a26dc3289a
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSABd8joZ:ShwZi32PVTf9d2oZ
- TLSH T108C6E503AD7CED6AF97E39B5C858CA749C183D196A637426B9F0BF5EE4321C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_cbacd218a5495a033bc27a6f6554cc54_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_cbacd218a5495a033bc27a6f6554cc54_amadey_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 11.3MB
- SHA256 431704b56a31c464b0a20eb9551f20712c6ebd3d4451d7b21754ea18e3f63fe7
- MD5 cbacd218a5495a033bc27a6f6554cc54
- SHA1 7dce770bd3ca648b919095d1ef840af6e17cbfcc
- SHA512 cf7879ba392bd36f7f8db3c8cde043e93beee0f2a32b4ea328c50a916663e84ae8dc9bdd9f0da9489364e44f9a886572ad02b00c9d6bdbc1301bd4a26dc3289a
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSABd8joZ:ShwZi32PVTf9d2oZ
- TLSH T108C6E503AD7CED6AF97E39B5C858CA749C183D196A637426B9F0BF5EE4321C17608231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory