General
- Target 2025-05-10_57aa9c9ef7a2d8597dc273ad95c37a27_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader
- Size 5.1MB
- Sample250510-xlfmrssjs6
- SHA256 2c471b46dfdcd8c16cd8ba4ab0af82fc12ec56a9c52a472389ff57db13f83b8b
- MD5 57aa9c9ef7a2d8597dc273ad95c37a27
- SHA1 be4907d9eda55c058b13394ea3b1540e56eb438c
- SHA512 9e044da47ee491e01320a05a4016736fa4d42121e365fd76636ee40b74cfe12a808c79b77bcf5bb3395f8e4c682d04ae555292c3519e42b5ae65feae000f31fd
- SSDEEP 98304:ZPqeaEqTmJWIpk2rEhGdg46Awi2vru4uhFzmDpE:ZPD1bnEh46Ahye
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-05-10_57aa9c9ef7a2d8597dc273ad95c37a27_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader.exe
Resource
win10v2004-20250502-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-05-10_57aa9c9ef7a2d8597dc273ad95c37a27_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader.exe
Resource
win11-20250502-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-05-10_57aa9c9ef7a2d8597dc273ad95c37a27_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader
- Size 5.1MB
- SHA256 2c471b46dfdcd8c16cd8ba4ab0af82fc12ec56a9c52a472389ff57db13f83b8b
- MD5 57aa9c9ef7a2d8597dc273ad95c37a27
- SHA1 be4907d9eda55c058b13394ea3b1540e56eb438c
- SHA512 9e044da47ee491e01320a05a4016736fa4d42121e365fd76636ee40b74cfe12a808c79b77bcf5bb3395f8e4c682d04ae555292c3519e42b5ae65feae000f31fd
- SSDEEP 98304:ZPqeaEqTmJWIpk2rEhGdg46Awi2vru4uhFzmDpE:ZPD1bnEh46Ahye
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE