General
- Target 2026-08-19_4ab01beefb750075582c4e90bc38f892_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc
- Size 16.0MB
- Sample260819-keafyszhrd
- SHA256 c55f189ffceb4ccd14e7bd4cbe74cbe71b8d9eca32ce38916e1f60b5901690e7
- MD5 4ab01beefb750075582c4e90bc38f892
- SHA1 0da293732dd171d814f993d8729b356fe22bbaa7
- SHA512 6d531ba35cbfcdbc932d0f2e545d5388eca82a8b7a649f903835ad6afcfd22d1cb307de21754fd2575544ab26b00ee18d0493566680302a1feb6575fa98918b2
- SSDEEP 393216:Nu9jqbAmsFXBmR1e2d4LTKUPrhMK6NLOH9Ly/G:mqzs6R19sKOrhS8LX
- TLSH T1CDF6232BF296A07EE02A553969B29504D9377D615B12888747ECF88DDF372B01E3E343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-19_4ab01beefb750075582c4e90bc38f892_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4ab01beefb750075582c4e90bc38f892_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc
- Size 16.0MB
- SHA256 c55f189ffceb4ccd14e7bd4cbe74cbe71b8d9eca32ce38916e1f60b5901690e7
- MD5 4ab01beefb750075582c4e90bc38f892
- SHA1 0da293732dd171d814f993d8729b356fe22bbaa7
- SHA512 6d531ba35cbfcdbc932d0f2e545d5388eca82a8b7a649f903835ad6afcfd22d1cb307de21754fd2575544ab26b00ee18d0493566680302a1feb6575fa98918b2
- SSDEEP 393216:Nu9jqbAmsFXBmR1e2d4LTKUPrhMK6NLOH9Ly/G:mqzs6R19sKOrhS8LX
- TLSH T1CDF6232BF296A07EE02A553969B29504D9377D615B12888747ECF88DDF372B01E3E343
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE