Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/08/2026, 05:41
Static task
static1
6 signatures
Behavioral task
behavioral1
Sample
2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-22_840c7fa2cd77b2e671109e54c3e78cbb_amadey_darkgate_elex_glassworm_icedid_krakenkeylogger_lu.exe
- Size 21.2MB
- Sample260823-gdspcstaph
- SHA256 75d36b64bfe75a14fbfb37565d941c55cf89c6e66cf182ca8e5225103f9731e5
- MD5 840c7fa2cd77b2e671109e54c3e78cbb
- SHA1 2e623d30ea6da3b5adef9bf9a58c056eb2b60cd2
- SHA512 9131a1fb5835bceacac71f2712642e8102cdb319743a42569c240ade711f1d4e383a35650c6a8a307d1b352a314886db0ab383423fa520654b105c271b3e6df2
- SSDEEP 196608:jswBeTN/UWSr68KSQlyr7r04oox0gIE2we9bGHDMRLQkVkYBPDWtfPdoerj/tCw8:dYT2m8KSQlyjzAajgL6fKeUP
- TLSH T1FA277C29ABD15A3BC1BB8374C0F21167BB34A8027329DE4F95C507652EC3B526E543AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects encrypted or obfuscated .NET executables 1 IoCs
resource yara_rule behavioral2/memory/472-3-0x00000249C6370000-0x00000249C78AE000-memory.dmp INDICATOR_EXE_DotNET_Encrypted - Detects executables packed with Dotfuscator 1 IoCs
resource yara_rule behavioral2/memory/472-3-0x00000249C6370000-0x00000249C78AE000-memory.dmp INDICATOR_EXE_Packed_Dotfuscator - Detects executables packed with Goliath 1 IoCs
resource yara_rule behavioral2/memory/472-3-0x00000249C6370000-0x00000249C78AE000-memory.dmp INDICATOR_EXE_Packed_Goliath - Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule behavioral2/memory/472-3-0x00000249C6370000-0x00000249C78AE000-memory.dmp INDICATOR_EXE_Packed_SmartAssembly