General
- Target 2026-04-15_8b5147983491a88a8aacecb073899442_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop
- Size 3.1MB
- Sample260415-rhvdvsbt71
- SHA256 d9b99e5c481cd130bc8607ef2860c96411c4eb09a066ee1354da64a6ef701a45
- MD5 8b5147983491a88a8aacecb073899442
- SHA1 663565b0359d8fe4a4b18f7da19a5f2f48252b00
- SHA512 304aba868910df1a474ff10b36890591d71715b72cb04a92b23fb19ff7c3324ec79ac5dddd125169c26f9f43d2cb3aab64c01e99f4e8a3830f541c9a4cb84c55
- SSDEEP 49152:/rRokpdhKPgssSt2gi8xmN3Aek03noj45wlDTk:/rRok/hv7StYeUJF3noxDw
- TLSH T155E53A0366D4D232D5BA26707DF4D2625DE67DE04932895F33847FAE4876E80ABE1323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_8b5147983491a88a8aacecb073899442_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_8b5147983491a88a8aacecb073899442_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_8b5147983491a88a8aacecb073899442_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop
- Size 3.1MB
- SHA256 d9b99e5c481cd130bc8607ef2860c96411c4eb09a066ee1354da64a6ef701a45
- MD5 8b5147983491a88a8aacecb073899442
- SHA1 663565b0359d8fe4a4b18f7da19a5f2f48252b00
- SHA512 304aba868910df1a474ff10b36890591d71715b72cb04a92b23fb19ff7c3324ec79ac5dddd125169c26f9f43d2cb3aab64c01e99f4e8a3830f541c9a4cb84c55
- SSDEEP 49152:/rRokpdhKPgssSt2gi8xmN3Aek03noj45wlDTk:/rRok/hv7StYeUJF3noxDw
- TLSH T155E53A0366D4D232D5BA26707DF4D2625DE67DE04932895F33847FAE4876E80ABE1323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.