General
- Target 2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_poet-rat_vidar
- Size 21.2MB
- Sample260823-gdspcstaph
- SHA256 75d36b64bfe75a14fbfb37565d941c55cf89c6e66cf182ca8e5225103f9731e5
- MD5 840c7fa2cd77b2e671109e54c3e78cbb
- SHA1 2e623d30ea6da3b5adef9bf9a58c056eb2b60cd2
- SHA512 9131a1fb5835bceacac71f2712642e8102cdb319743a42569c240ade711f1d4e383a35650c6a8a307d1b352a314886db0ab383423fa520654b105c271b3e6df2
- SSDEEP 196608:jswBeTN/UWSr68KSQlyr7r04oox0gIE2we9bGHDMRLQkVkYBPDWtfPdoerj/tCw8:dYT2m8KSQlyjzAajgL6fKeUP
- TLSH T1FA277C29ABD15A3BC1BB8374C0F21167BB34A8027329DE4F95C507652EC3B526E543AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
6 signatures
Behavioral task
behavioral1
Sample
2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_poet-rat_vidar
- Size 21.2MB
- SHA256 75d36b64bfe75a14fbfb37565d941c55cf89c6e66cf182ca8e5225103f9731e5
- MD5 840c7fa2cd77b2e671109e54c3e78cbb
- SHA1 2e623d30ea6da3b5adef9bf9a58c056eb2b60cd2
- SHA512 9131a1fb5835bceacac71f2712642e8102cdb319743a42569c240ade711f1d4e383a35650c6a8a307d1b352a314886db0ab383423fa520654b105c271b3e6df2
- SSDEEP 196608:jswBeTN/UWSr68KSQlyr7r04oox0gIE2we9bGHDMRLQkVkYBPDWtfPdoerj/tCw8:dYT2m8KSQlyjzAajgL6fKeUP
- TLSH T1FA277C29ABD15A3BC1BB8374C0F21167BB34A8027329DE4F95C507652EC3B526E543AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects encrypted or obfuscated .NET executables
-
Detects executables packed with Dotfuscator
-
Detects executables packed with Goliath
-
Detects executables packed with SmartAssembly