General
- Target 2025-05-28_fb8497d5caa64c5c9b7887f828a92414_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader
- Size 5.1MB
- Sample250528-tkv5aay1at
- SHA256 fc71a8363316dd940453269e8ab1247b48e8bd921bdec7c14b0f712d9720a0f7
- MD5 fb8497d5caa64c5c9b7887f828a92414
- SHA1 296946bbf923e338b3b73bb49b6e8ee816d96eee
- SHA512 a6e72e13c3b4ae66d7e5c1afc8a009b350efecc91c7bd4aaffc41f6185ed29a517774e2af5b160e2b5c4f24bb8fd9f082df801713a33c34aac5dda8119fa6f98
- SSDEEP 98304:ZPqeaEqTmJWIpk2rEhGdg46Awi2vru4uhFzmDpz:ZPD1bnEh46AhyV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-05-28_fb8497d5caa64c5c9b7887f828a92414_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader.exe
Resource
win10v2004-20250502-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-05-28_fb8497d5caa64c5c9b7887f828a92414_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader.exe
Resource
win11-20250502-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-05-28_fb8497d5caa64c5c9b7887f828a92414_amadey_black-basta_darkgate_elex_gcleaner_luca-stealer_smoke-loader
- Size 5.1MB
- SHA256 fc71a8363316dd940453269e8ab1247b48e8bd921bdec7c14b0f712d9720a0f7
- MD5 fb8497d5caa64c5c9b7887f828a92414
- SHA1 296946bbf923e338b3b73bb49b6e8ee816d96eee
- SHA512 a6e72e13c3b4ae66d7e5c1afc8a009b350efecc91c7bd4aaffc41f6185ed29a517774e2af5b160e2b5c4f24bb8fd9f082df801713a33c34aac5dda8119fa6f98
- SSDEEP 98304:ZPqeaEqTmJWIpk2rEhGdg46Awi2vru4uhFzmDpz:ZPD1bnEh46AhyV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE