General
- Target 2026-08-28_845625e1a8211dc3b01f34762ecdbbce_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- Sample260828-p91zlsak2t
- SHA256 284ff30c99496541256597f48998c277a78f5ffdd75ea484693581ebb8c38f39
- MD5 845625e1a8211dc3b01f34762ecdbbce
- SHA1 7032b36daf32d8f022146bca30c389e000e3f216
- SHA512 e77925448e2db7e77e890c23e73ef0a65db6b1fe25dd141d57be242457006a76b8ab8c9364398b8e6e340e46751658bb319817b8d970f4b4b6c9818a7797266c
- SSDEEP 24576:iJsQEZ11A3tQ47Z3MvNq+ftTuAD2eH2eKhNG8w8ISlYVfFCxBjk2kGi05aHSDw/V:Z6l2HT2C2egfwCsqoaaHSDwd
- TLSH T1CC65CF11BAC24471F19201B502AEE73ABF39B2516725CACBC7E0DC245D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_845625e1a8211dc3b01f34762ecdbbce_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_845625e1a8211dc3b01f34762ecdbbce_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.45.188:4444
Targets
-
- Target 2026-08-28_845625e1a8211dc3b01f34762ecdbbce_amadey_darkgate_elex_glassworm_luca-stealer_lynx_metamorfo_njrat
- Size 1.4MB
- SHA256 284ff30c99496541256597f48998c277a78f5ffdd75ea484693581ebb8c38f39
- MD5 845625e1a8211dc3b01f34762ecdbbce
- SHA1 7032b36daf32d8f022146bca30c389e000e3f216
- SHA512 e77925448e2db7e77e890c23e73ef0a65db6b1fe25dd141d57be242457006a76b8ab8c9364398b8e6e340e46751658bb319817b8d970f4b4b6c9818a7797266c
- SSDEEP 24576:iJsQEZ11A3tQ47Z3MvNq+ftTuAD2eH2eKhNG8w8ISlYVfFCxBjk2kGi05aHSDw/V:Z6l2HT2C2egfwCsqoaaHSDwd
- TLSH T1CC65CF11BAC24471F19201B502AEE73ABF39B2516725CACBC7E0DC245D622E2E93F75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.