General
- Target 2026-08-15_f217bc51c616f0882b8c90fb737cedc0_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 12.3MB
- Sample260815-mfdwwatfre
- SHA256 78ca4e99b97b6415cb27f7b109159645fffc84bda4e4f647ef792a896e33c5b1
- MD5 f217bc51c616f0882b8c90fb737cedc0
- SHA1 eb8ce80e57a55855d6497315c3cafd77a5586545
- SHA512 ba8cc7dc9b0c6f73d6220e73901bac6b77aa2663398534127ddc854933b483617c3b0d471a7dfd80f6671d8e605ba739fefdb3186364704e960ffd05a8880bb0
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo/7IV2VIjozjo0:ShwZi32PVTfYoTIV2VqoXo0
- TLSH T19AD60603AD7CDD2AF87E39B5C894DA749C283D191A237457B9E0BF6EE9321C17618231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_f217bc51c616f0882b8c90fb737cedc0_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f217bc51c616f0882b8c90fb737cedc0_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 12.3MB
- SHA256 78ca4e99b97b6415cb27f7b109159645fffc84bda4e4f647ef792a896e33c5b1
- MD5 f217bc51c616f0882b8c90fb737cedc0
- SHA1 eb8ce80e57a55855d6497315c3cafd77a5586545
- SHA512 ba8cc7dc9b0c6f73d6220e73901bac6b77aa2663398534127ddc854933b483617c3b0d471a7dfd80f6671d8e605ba739fefdb3186364704e960ffd05a8880bb0
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo/7IV2VIjozjo0:ShwZi32PVTfYoTIV2VqoXo0
- TLSH T19AD60603AD7CDD2AF87E39B5C894DA749C283D191A237457B9E0BF6EE9321C17618231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory