75d36b64bfe75a14fbfb37565d941c55cf89c6e66cf182ca8e5225103f9731e5

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/08/2026, 05:41

Target
2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
Size 21.2MB
Sample260823-gdspcstaph
SHA256 75d36b64bfe75a14fbfb37565d941c55cf89c6e66cf182ca8e5225103f9731e5
MD5 840c7fa2cd77b2e671109e54c3e78cbb
SHA1 2e623d30ea6da3b5adef9bf9a58c056eb2b60cd2
SHA512 9131a1fb5835bceacac71f2712642e8102cdb319743a42569c240ade711f1d4e383a35650c6a8a307d1b352a314886db0ab383423fa520654b105c271b3e6df2
SSDEEP 196608:jswBeTN/UWSr68KSQlyr7r04oox0gIE2we9bGHDMRLQkVkYBPDWtfPdoerj/tCw8:dYT2m8KSQlyjzAajgL6fKeUP
TLSH
T1FA277C29ABD15A3BC1BB8374C0F21167BB34A8027329DE4F95C507652EC3B526E543AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Detects encrypted or obfuscated .NET executables 1 IoCs

resource	yara_rule
behavioral1/memory/5084-0-0x0000015CCFD70000-0x0000015CD12AE000-memory.dmp	INDICATOR_EXE_DotNET_Encrypted

Detects executables packed with Dotfuscator 1 IoCs

resource	yara_rule
behavioral1/memory/5084-0-0x0000015CCFD70000-0x0000015CD12AE000-memory.dmp	INDICATOR_EXE_Packed_Dotfuscator

Detects executables packed with Goliath 1 IoCs

resource	yara_rule
behavioral1/memory/5084-0-0x0000015CCFD70000-0x0000015CD12AE000-memory.dmp	INDICATOR_EXE_Packed_Goliath

Detects executables packed with SmartAssembly 1 IoCs

resource	yara_rule
behavioral1/memory/5084-0-0x0000015CCFD70000-0x0000015CD12AE000-memory.dmp	INDICATOR_EXE_Packed_SmartAssembly

C:\Users\Admin\AppData\Local\Temp\2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe"
1⤵
PID:5084