General
- Target 2026-10-22_a5297a8e6f47d0cb53b6d9cd8661ccf6_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.5MB
- Sample261024-cdm2nae17x
- SHA256 c9052be3f6e56a2758646ede8f9cd96329dc30ed1b169878cdca61def93115ed
- MD5 a5297a8e6f47d0cb53b6d9cd8661ccf6
- SHA1 c8c43f8b8b560ab1eb6af4cb4fd252a4b6342736
- SHA512 1d764b52010e1a5ff112a39c5ff92b6e1bd3e8ff360ebaf050d47527d7af1c80966b9e41beb16d4ccc3aad9c83463a3143fb2eb6a34f70276f34a7c6ec39520c
- SSDEEP 393216:W3okxWFgg9wnFyV3pFlHNCaPkU9hygrrMPS9:WYHegoFyV5nHNCsGgrrMP6
- TLSH T1BAF6F112A3448062D20515B121FA57382EB45FA60FB4DAEBF790FCB57F317A2A67740D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a5297a8e6f47d0cb53b6d9cd8661ccf6_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a5297a8e6f47d0cb53b6d9cd8661ccf6_darkgate_elex_emotet_glassworm_hacktools_icedid_stealc
- Size 15.5MB
- SHA256 c9052be3f6e56a2758646ede8f9cd96329dc30ed1b169878cdca61def93115ed
- MD5 a5297a8e6f47d0cb53b6d9cd8661ccf6
- SHA1 c8c43f8b8b560ab1eb6af4cb4fd252a4b6342736
- SHA512 1d764b52010e1a5ff112a39c5ff92b6e1bd3e8ff360ebaf050d47527d7af1c80966b9e41beb16d4ccc3aad9c83463a3143fb2eb6a34f70276f34a7c6ec39520c
- SSDEEP 393216:W3okxWFgg9wnFyV3pFlHNCaPkU9hygrrMPS9:WYHegoFyV5nHNCsGgrrMP6
- TLSH T1BAF6F112A3448062D20515B121FA57382EB45FA60FB4DAEBF790FCB57F317A2A67740D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL