General
- Target 2026-10-26_e6ce7e96483e064e283b7843d85e003a_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc
- Size 54.5MB
- Sample261027-ehhnvaat5x
- SHA256 7f0c5680e825e5febb846959a5b215769774a554c4714833a72365657d83de20
- MD5 e6ce7e96483e064e283b7843d85e003a
- SHA1 6948a74571c592fe0c74b8fcac6757a6176190b8
- SHA512 934f559e7d4c6fe048a23ba386d962a94cd9f095cb7cf45f90dd0faba597548f7d73880782b27732902af30f7881f516644460bd4b53340ac27303f346c2df6a
- SSDEEP 1572864:PGlj6CJAhOXTTQXOvyz7XlSqb+DfEULkjBuGXN:Pa6UeMT8WmlJb+wUL8XN
- TLSH T10FC73322B2C7547FE1AE4A35CAB7C1019B3B78505B2289A797E44DAEDF271E01D3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-10-26_e6ce7e96483e064e283b7843d85e003a_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e6ce7e96483e064e283b7843d85e003a_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e6ce7e96483e064e283b7843d85e003a_darkgate_gcleaner_icedid_luca-stealer_njrat_stealc
- Size 54.5MB
- SHA256 7f0c5680e825e5febb846959a5b215769774a554c4714833a72365657d83de20
- MD5 e6ce7e96483e064e283b7843d85e003a
- SHA1 6948a74571c592fe0c74b8fcac6757a6176190b8
- SHA512 934f559e7d4c6fe048a23ba386d962a94cd9f095cb7cf45f90dd0faba597548f7d73880782b27732902af30f7881f516644460bd4b53340ac27303f346c2df6a
- SSDEEP 1572864:PGlj6CJAhOXTTQXOvyz7XlSqb+DfEULkjBuGXN:Pa6UeMT8WmlJb+wUL8XN
- TLSH T10FC73322B2C7547FE1AE4A35CAB7C1019B3B78505B2289A797E44DAEDF271E01D3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.