General
- Target 2026-08-22_9754e2c5628e9b57462ecec1cabdce77_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_tofsee
- Size 6.5MB
- Sample260823-e3d66asfpa
- SHA256 4fbb939c80ab02a4fef4559fe661ad480261181259d612a9536c434fb4050076
- MD5 9754e2c5628e9b57462ecec1cabdce77
- SHA1 b504531bf0d63356530a03a83d50d4d1a98e3482
- SHA512 094b72747eb8f646cd2b2ea2e5ee47b076bcdf17f3f9f6a3514cb8b15d4473022af0b1de0f4e4643d9e439c43658c529ed29c275767f73377c749d19f26dd686
- SSDEEP 98304:1eR2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlF01A7:1eR2S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T1D466F02EFB948036D51B127398289361D97AF574E3298FC72388971DFB742C36E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_9754e2c5628e9b57462ecec1cabdce77_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_9754e2c5628e9b57462ecec1cabdce77_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_9754e2c5628e9b57462ecec1cabdce77_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_tofsee
- Size 6.5MB
- SHA256 4fbb939c80ab02a4fef4559fe661ad480261181259d612a9536c434fb4050076
- MD5 9754e2c5628e9b57462ecec1cabdce77
- SHA1 b504531bf0d63356530a03a83d50d4d1a98e3482
- SHA512 094b72747eb8f646cd2b2ea2e5ee47b076bcdf17f3f9f6a3514cb8b15d4473022af0b1de0f4e4643d9e439c43658c529ed29c275767f73377c749d19f26dd686
- SSDEEP 98304:1eR2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlF01A7:1eR2S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T1D466F02EFB948036D51B127398289361D97AF574E3298FC72388971DFB742C36E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory