General
- Target 2026-11-01_be7ba44faa3886cf3f7384c0f4a1f743_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 1.4MB
- Sample261102-l3gqlssvez
- SHA256 223a089a0035f967351d102a4851b1b2296b100491cc494b9bb0ac454202a6b6
- MD5 be7ba44faa3886cf3f7384c0f4a1f743
- SHA1 ce7b5a71183b6b7d10f9b4d8d7e1ab5aaff57747
- SHA512 5a7131d6d4a411c6209e7c6084eb00fff6bb290729ad803deb5cd89cd28747c35a612ac275c079beba1622ce63153a95ab96dac7293b5d0cea796e845a503016
- SSDEEP 24576:BTyfiD4jBr22smnkqnYvx5IQPQA4joBYd6YTekB7N5qu2Bcjf59SD:c68bx0QApsRekBeZm
- TLSH T1C865BF52B6D245B2F54201F506ABE73EBE39B2029725CAC3D3E0DC5819522E1EA3F35D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_be7ba44faa3886cf3f7384c0f4a1f743_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_be7ba44faa3886cf3f7384c0f4a1f743_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.221.128:4444
Targets
-
- Target 2026-11-01_be7ba44faa3886cf3f7384c0f4a1f743_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 1.4MB
- SHA256 223a089a0035f967351d102a4851b1b2296b100491cc494b9bb0ac454202a6b6
- MD5 be7ba44faa3886cf3f7384c0f4a1f743
- SHA1 ce7b5a71183b6b7d10f9b4d8d7e1ab5aaff57747
- SHA512 5a7131d6d4a411c6209e7c6084eb00fff6bb290729ad803deb5cd89cd28747c35a612ac275c079beba1622ce63153a95ab96dac7293b5d0cea796e845a503016
- SSDEEP 24576:BTyfiD4jBr22smnkqnYvx5IQPQA4joBYd6YTekB7N5qu2Bcjf59SD:c68bx0QApsRekBeZm
- TLSH T1C865BF52B6D245B2F54201F506ABE73EBE39B2029725CAC3D3E0DC5819522E1EA3F35D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.