General
- Target 2026-09-30_bee52fd6d117e1e84d30a3e2b4dea477_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 1.4MB
- Sample261001-hp3jdaseka
- SHA256 c5341d3974f84b8337751fcd18068daf994ce8a034580d31f3786c797300284b
- MD5 bee52fd6d117e1e84d30a3e2b4dea477
- SHA1 8aff215da76f8a412a1b0e69b9b0614c33f43326
- SHA512 264cabd31cd526a98e6c76797d50bba96c309b0de22350ad6acb8b5d9c3bd9a5bedb63208eada51d0817e67a5c141b5c3226e17fba54a926980c2deeb2b5fb20
- SSDEEP 24576:86r5Raj8Z2NZ0QwkKLF2xsKkPI6DsEXMcW+Olj+IhhlXFo1AjEyHwdif5cCE:IQq0Qwk/KJLW+UjH5oyd5
- TLSH T17A65CF52BAC244B1F55201B142AEE73E7F3972516720CAC7D7D0DC689D622E2AA3F34D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_bee52fd6d117e1e84d30a3e2b4dea477_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_bee52fd6d117e1e84d30a3e2b4dea477_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.45.194:443
Targets
-
- Target 2026-09-30_bee52fd6d117e1e84d30a3e2b4dea477_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 1.4MB
- SHA256 c5341d3974f84b8337751fcd18068daf994ce8a034580d31f3786c797300284b
- MD5 bee52fd6d117e1e84d30a3e2b4dea477
- SHA1 8aff215da76f8a412a1b0e69b9b0614c33f43326
- SHA512 264cabd31cd526a98e6c76797d50bba96c309b0de22350ad6acb8b5d9c3bd9a5bedb63208eada51d0817e67a5c141b5c3226e17fba54a926980c2deeb2b5fb20
- SSDEEP 24576:86r5Raj8Z2NZ0QwkKLF2xsKkPI6DsEXMcW+Olj+IhhlXFo1AjEyHwdif5cCE:IQq0Qwk/KJLW+UjH5oyd5
- TLSH T17A65CF52BAC244B1F55201B142AEE73E7F3972516720CAC7D7D0DC689D622E2AA3F34D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.