General
- Target 2026-09-04_428071cfc12c716f81409293e110e522_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_revil
- Size 3.6MB
- Sample260905-p3dwha11bt
- SHA256 f9dd2dc1bb48053fc26769bb4b8099f7e0d7312e76dddb731aaa75ba5d64992e
- MD5 428071cfc12c716f81409293e110e522
- SHA1 405e6fe25c2676497c9cb672ccf1bc9e08aa3b10
- SHA512 104349a18468feec8edd594ef3179b4420e6fac4b49fd717d44ab35d2eca3d2a7506a14cb8e665583b75728f95c588daba2ec94be479d90493bd26ffe649cb42
- SSDEEP 49152:8Ji7ptElDVfcVL8X1tIB9F3DhiZ7jvdB5d1pp/iXZIJKPywloljSfCvjLk98v9HJ:8Jid2kL8FktIpT6pqhs6vjLL1dAhC
- TLSH T19E06D003BA818073E5930170457AABBF893DA628073495C3D7D45E7999316E26F3B3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-04_428071cfc12c716f81409293e110e522_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_revil.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_428071cfc12c716f81409293e110e522_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_revil.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_428071cfc12c716f81409293e110e522_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_revil
- Size 3.6MB
- SHA256 f9dd2dc1bb48053fc26769bb4b8099f7e0d7312e76dddb731aaa75ba5d64992e
- MD5 428071cfc12c716f81409293e110e522
- SHA1 405e6fe25c2676497c9cb672ccf1bc9e08aa3b10
- SHA512 104349a18468feec8edd594ef3179b4420e6fac4b49fd717d44ab35d2eca3d2a7506a14cb8e665583b75728f95c588daba2ec94be479d90493bd26ffe649cb42
- SSDEEP 49152:8Ji7ptElDVfcVL8X1tIB9F3DhiZ7jvdB5d1pp/iXZIJKPywloljSfCvjLk98v9HJ:8Jid2kL8FktIpT6pqhs6vjLL1dAhC
- TLSH T19E06D003BA818073E5930170457AABBF893DA628073495C3D7D45E7999316E26F3B3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.