General
- Target 2026-08-25_cd13e1acbf32664bef8c758dfe762880_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 8.5MB
- Sample260826-kxd7vsce46
- SHA256 a3acf749631bb25bc4c287b4ead6e378b5b507c4daa730314a04b3c389028c90
- MD5 cd13e1acbf32664bef8c758dfe762880
- SHA1 d7d991a02216289b731d98839c438ddbe51b3f97
- SHA512 ded5cae726f3c999616ea5b0e079a53604f581c433a33771da294dbfe2e14fcdaf43e5189d5b7a42dcf53b454123cb16ead1fc2e5bf720af3b47db2bbf7ff998
- SSDEEP 98304:/K5d29bXsPN5kiQaZ5A2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsF6:O2O5VPA2S9+ULdNPtbuPZOOmnqogHh/0
- TLSH T19F96D02EFB858032D95601B258789A76C17DF534872A4AC763C86B2AB7346C33F33657
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_cd13e1acbf32664bef8c758dfe762880_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_l.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_cd13e1acbf32664bef8c758dfe762880_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_l.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_cd13e1acbf32664bef8c758dfe762880_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 8.5MB
- SHA256 a3acf749631bb25bc4c287b4ead6e378b5b507c4daa730314a04b3c389028c90
- MD5 cd13e1acbf32664bef8c758dfe762880
- SHA1 d7d991a02216289b731d98839c438ddbe51b3f97
- SHA512 ded5cae726f3c999616ea5b0e079a53604f581c433a33771da294dbfe2e14fcdaf43e5189d5b7a42dcf53b454123cb16ead1fc2e5bf720af3b47db2bbf7ff998
- SSDEEP 98304:/K5d29bXsPN5kiQaZ5A2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsF6:O2O5VPA2S9+ULdNPtbuPZOOmnqogHh/0
- TLSH T19F96D02EFB858032D95601B258789A76C17DF534872A4AC763C86B2AB7346C33F33657
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory