General
- Target 2026-10-22_97f9272a29357c6b2f8d82b66972d1ca_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat
- Size 5.6MB
- Sample261024-eavy7seb82
- SHA256 05b0b613260023473b230969513cd03cb55e640c5608a95d266bf02b4c6cd788
- MD5 97f9272a29357c6b2f8d82b66972d1ca
- SHA1 105564293473d56a84396fdd0908ce7c55ed9e98
- SHA512 3c8e1d3fdd2c100a10d52503eff05c373cd188fcb2c389666f07b25e3cbb934db6b77c8ffa7c167ff5cabc4a6bfe08829aae22fdb13515f4ab6d5e7ad386f8cb
- SSDEEP 49152:EG8eBtefcoQeH1XULH38DUIRtDwE2ZV8l9QBqBmlgqaoIg9hij+SA8AOEL+5KqvH:5lteopHwFtmIAI63VLylEs
- TLSH T1B946BF1662D1A011C1B331756D9776226ABA78396B32D1CB73C84B5C38F16C3863BB2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_97f9272a29357c6b2f8d82b66972d1ca_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_97f9272a29357c6b2f8d82b66972d1ca_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_97f9272a29357c6b2f8d82b66972d1ca_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat
- Size 5.6MB
- SHA256 05b0b613260023473b230969513cd03cb55e640c5608a95d266bf02b4c6cd788
- MD5 97f9272a29357c6b2f8d82b66972d1ca
- SHA1 105564293473d56a84396fdd0908ce7c55ed9e98
- SHA512 3c8e1d3fdd2c100a10d52503eff05c373cd188fcb2c389666f07b25e3cbb934db6b77c8ffa7c167ff5cabc4a6bfe08829aae22fdb13515f4ab6d5e7ad386f8cb
- SSDEEP 49152:EG8eBtefcoQeH1XULH38DUIRtDwE2ZV8l9QBqBmlgqaoIg9hij+SA8AOEL+5KqvH:5lteopHwFtmIAI63VLylEs
- TLSH T1B946BF1662D1A011C1B331756D9776226ABA78396B32D1CB73C84B5C38F16C3863BB2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)
-
Checks whether UAC is enabled
-
Drops file in System32 directory