General
- Target 2026-10-01_62d99249095e40388f71b7af2c6cc834_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 5.4MB
- Sample261002-qml3lsba63
- SHA256 9b7a89722fd4690b4d042e650714ececde4599203d113103eaa1e3e92b47eec9
- MD5 62d99249095e40388f71b7af2c6cc834
- SHA1 342ccd7ec7f03cb8b7515918448562dd85c0e881
- SHA512 902c173bd27a6e907e4926d4791b0c025e0bbe2e932eba0f449e0067003e1a4ce4d53d0c7f9f401d6269454544e5db0ce9b44f1fa2afe67c6b976436874d969f
- SSDEEP 49152:M7zLNHEgkjKYHrJg1NNNRNNNTONv/TO98VChBtzysUVap/Uv/TO98VChBtzysUV3:yPREgWsbtzysiCbtzysiGj
- TLSH T14F46BE00AFA16836FD3245760DAA23664438FE31F74205DF9293F61E5761DF229372AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_62d99249095e40388f71b7af2c6cc834_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_62d99249095e40388f71b7af2c6cc834_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos
- Size 5.4MB
- SHA256 9b7a89722fd4690b4d042e650714ececde4599203d113103eaa1e3e92b47eec9
- MD5 62d99249095e40388f71b7af2c6cc834
- SHA1 342ccd7ec7f03cb8b7515918448562dd85c0e881
- SHA512 902c173bd27a6e907e4926d4791b0c025e0bbe2e932eba0f449e0067003e1a4ce4d53d0c7f9f401d6269454544e5db0ce9b44f1fa2afe67c6b976436874d969f
- SSDEEP 49152:M7zLNHEgkjKYHrJg1NNNRNNNTONv/TO98VChBtzysUVap/Uv/TO98VChBtzysUV3:yPREgWsbtzysiCbtzysiGj
- TLSH T14F46BE00AFA16836FD3245760DAA23664438FE31F74205DF9293F61E5761DF229372AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Executes dropped EXE
-
Loads dropped DLL