General
- Target 2026-10-30_cf3510316f349f036f235ed5f6d54c87_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_smoke-loader
- Size 1.2MB
- Sample261031-x7jasafv9p
- SHA256 608390b87ba20ffb323aa6e6b9fd0ad8e7c314ad0da9ecf5d76a3895cf6ab088
- MD5 cf3510316f349f036f235ed5f6d54c87
- SHA1 50126a31316cd9d2870f08785103fd82627b615f
- SHA512 2c46c013366b0898ea42ce95bc148d5ea1d1cf711d0241150149ad9d3fb98b75df1215f41cd54c8343e0eb7fcc7fed4405d96f0c6a1db7a74cad54c851cfe37a
- SSDEEP 24576:faurR0QvUawjJv4xFV1To1GPC31fILaq/K34UQCxW:yurRDaOxnOB3aLbK3R5Q
- TLSH T11D454A0177E64025F5B22AB06EF5A625CF7BB9A11931D18F129C494F1EB3AC09E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-30_cf3510316f349f036f235ed5f6d54c87_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_cf3510316f349f036f235ed5f6d54c87_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_smoke-loader
- Size 1.2MB
- SHA256 608390b87ba20ffb323aa6e6b9fd0ad8e7c314ad0da9ecf5d76a3895cf6ab088
- MD5 cf3510316f349f036f235ed5f6d54c87
- SHA1 50126a31316cd9d2870f08785103fd82627b615f
- SHA512 2c46c013366b0898ea42ce95bc148d5ea1d1cf711d0241150149ad9d3fb98b75df1215f41cd54c8343e0eb7fcc7fed4405d96f0c6a1db7a74cad54c851cfe37a
- SSDEEP 24576:faurR0QvUawjJv4xFV1To1GPC31fILaq/K34UQCxW:yurRDaOxnOB3aLbK3R5Q
- TLSH T11D454A0177E64025F5B22AB06EF5A625CF7BB9A11931D18F129C494F1EB3AC09E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers