General
- Target 2026-08-27_5840bd414136dda6187ad46832c58514_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar
- Size 13.8MB
- Sample260827-vtp53abr8v
- SHA256 7165376cf6db80c371d3fc8580ac7b3242d30e02bea6014ed84a127138d15e22
- MD5 5840bd414136dda6187ad46832c58514
- SHA1 c4eefd36cc43f20618d48e22013b170f40825ac1
- SHA512 eb572af8a5c1eb8b567b1d63721081fb3fd9d918f3d3c256a1f050381739c5ee5003654baf69b67da489f80b89d44ec95d71f9504d7d7184f7b2be4c7e0a8378
- SSDEEP 49152:U+ER+Ey9+ER+Ey9+ER+Ey9+EWiw2W+ER+Ey9+ER+Ey9+ER+Ey9+EWiw2W+ER+Ey3:XKjKWQckVgtev5mnlNLS
- TLSH T115E66D09FADA40A1E97751704897C27ECA71BD2187228EEFE684D72F5E33BD06834B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_5840bd414136dda6187ad46832c58514_amadey_darkgate_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_5840bd414136dda6187ad46832c58514_amadey_darkgate_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_5840bd414136dda6187ad46832c58514_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar
- Size 13.8MB
- SHA256 7165376cf6db80c371d3fc8580ac7b3242d30e02bea6014ed84a127138d15e22
- MD5 5840bd414136dda6187ad46832c58514
- SHA1 c4eefd36cc43f20618d48e22013b170f40825ac1
- SHA512 eb572af8a5c1eb8b567b1d63721081fb3fd9d918f3d3c256a1f050381739c5ee5003654baf69b67da489f80b89d44ec95d71f9504d7d7184f7b2be4c7e0a8378
- SSDEEP 49152:U+ER+Ey9+ER+Ey9+ER+Ey9+EWiw2W+ER+Ey9+ER+Ey9+ER+Ey9+EWiw2W+ER+Ey3:XKjKWQckVgtev5mnlNLS
- TLSH T115E66D09FADA40A1E97751704897C27ECA71BD2187228EEFE684D72F5E33BD06834B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1