General
- Target 2026-08-16_247748097bb85c1225aeceae0bb94faf_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 10.8MB
- Sample260816-fl8vwazfmd
- SHA256 e4f3f868db9339281db89da44d32252e36e082f7c603f9a8be5f819bbf7b94dd
- MD5 247748097bb85c1225aeceae0bb94faf
- SHA1 8c5e5aaba3e2a13ef529e9293e9ef6a6c542dce0
- SHA512 ccafce8bdceb829127d81b0414db73e2c89d2f659d8dddcde2d8acbf7af5b99d30f78a1a8039d49a7e898d631f840a16303c6b65069996d43a3f5176a0899271
- SSDEEP 98304:sJHttxC3ud6MOIvysiWCQKzo5qphIHVruP3WpF3UdE1hZHEdLFRfkZcLTIOSAl:KiGQnMkhgJuP32+dmhZk/9PLTf5
- TLSH T1B1B6BF1E77E50033C967527E956B5528E334E0179725CADB368CA39C0FB27D28632BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_247748097bb85c1225aeceae0bb94faf_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_247748097bb85c1225aeceae0bb94faf_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 10.8MB
- SHA256 e4f3f868db9339281db89da44d32252e36e082f7c603f9a8be5f819bbf7b94dd
- MD5 247748097bb85c1225aeceae0bb94faf
- SHA1 8c5e5aaba3e2a13ef529e9293e9ef6a6c542dce0
- SHA512 ccafce8bdceb829127d81b0414db73e2c89d2f659d8dddcde2d8acbf7af5b99d30f78a1a8039d49a7e898d631f840a16303c6b65069996d43a3f5176a0899271
- SSDEEP 98304:sJHttxC3ud6MOIvysiWCQKzo5qphIHVruP3WpF3UdE1hZHEdLFRfkZcLTIOSAl:KiGQnMkhgJuP32+dmhZk/9PLTf5
- TLSH T1B1B6BF1E77E50033C967527E956B5528E334E0179725CADB368CA39C0FB27D28632BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory