General
- Target 2026-09-10_9bcefe234ea564de98921b63b251b62e_amadey_darkgate_gazer_glassworm_helldown_hijackloader_icedid_njrat_rhadamanthys_stop
- Size 53.3MB
- Sample260910-qa1egaxvgz
- SHA256 fdb3b8a478df55794f543085f4966ee004c6bace5c2c235fceb38a65605b1e36
- MD5 9bcefe234ea564de98921b63b251b62e
- SHA1 e85ba16352402716c2c5d8dde32417f4de99682c
- SHA512 aa35daa7efa594deffcca2c3154ffd25801b73dd9d41a60de4bd8b6624115703afa3c374bbf6f6001e34b6c9cf443ebeea6c53b6375ae6658ef0330f08714f69
- SSDEEP 786432:t+mxFwariXohXuAHsr8swVZvECI0dypyjktBjdOywtlvv:t9xgoBfHDVZ8CI0dypYOdotlv
- TLSH T16CC7F107F172A9A6D8BF81346167631EEA317559033087E75B80E92DBBF06D4BE39B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-09-10_9bcefe234ea564de98921b63b251b62e_amadey_darkgate_gazer_glassworm_helldown_hijackloader_ic.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_9bcefe234ea564de98921b63b251b62e_amadey_darkgate_gazer_glassworm_helldown_hijackloader_ic.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_9bcefe234ea564de98921b63b251b62e_amadey_darkgate_gazer_glassworm_helldown_hijackloader_icedid_njrat_rhadamanthys_stop
- Size 53.3MB
- SHA256 fdb3b8a478df55794f543085f4966ee004c6bace5c2c235fceb38a65605b1e36
- MD5 9bcefe234ea564de98921b63b251b62e
- SHA1 e85ba16352402716c2c5d8dde32417f4de99682c
- SHA512 aa35daa7efa594deffcca2c3154ffd25801b73dd9d41a60de4bd8b6624115703afa3c374bbf6f6001e34b6c9cf443ebeea6c53b6375ae6658ef0330f08714f69
- SSDEEP 786432:t+mxFwariXohXuAHsr8swVZvECI0dypyjktBjdOywtlvv:t9xgoBfHDVZ8CI0dypYOdotlv
- TLSH T16CC7F107F172A9A6D8BF81346167631EEA317559033087E75B80E92DBBF06D4BE39B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Enigma
-
Detects executables packed with Themida
-
Detects executables packed with VMProtect.
-
Detects executables referencing many IR and analysis tools
-
Suspicious use of NtSetInformationThreadHideFromDebugger