General
- Target 2026-08-28_f44715dfc78bbab719349eafd3530d30_amadey_cloudeye_darkgate_elex_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 6.4MB
- Sample260828-gvgnestsdz
- SHA256 8d382934b93f5a6a6bfe1e13981b059106678c45123c4f8f9f3b3dea8c9548ea
- MD5 f44715dfc78bbab719349eafd3530d30
- SHA1 3e58f0f2d019a04162a6e44caad0f9732430c351
- SHA512 48856b8992edfeaa7b0ebe977269e924105c844a009a18ac53d375a118ed7dd7bef8535c9ccf422eed847440c8a88e83dd120276df5a565f1237147c4b748695
- SSDEEP 98304:TL392UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtG32880D:t2S9+ULdNPtbuPZOOmnqog32XO
- TLSH T1EA66D022F7E08432D41F1172687996265669FC652B15CBFB6389B91CFF302C3BE32256
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_f44715dfc78bbab719349eafd3530d30_amadey_cloudeye_darkgate_elex_hijackloader_luca-stealer_.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_f44715dfc78bbab719349eafd3530d30_amadey_cloudeye_darkgate_elex_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 6.4MB
- SHA256 8d382934b93f5a6a6bfe1e13981b059106678c45123c4f8f9f3b3dea8c9548ea
- MD5 f44715dfc78bbab719349eafd3530d30
- SHA1 3e58f0f2d019a04162a6e44caad0f9732430c351
- SHA512 48856b8992edfeaa7b0ebe977269e924105c844a009a18ac53d375a118ed7dd7bef8535c9ccf422eed847440c8a88e83dd120276df5a565f1237147c4b748695
- SSDEEP 98304:TL392UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtG32880D:t2S9+ULdNPtbuPZOOmnqog32XO
- TLSH T1EA66D022F7E08432D41F1172687996265669FC652B15CBFB6389B91CFF302C3BE32256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory