General
- Target 2026-04-18_4cdf6092d3dfc711896bdf94a043df0a_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop
- Size 3.7MB
- Sample260418-pflylahs8m
- SHA256 15415dbaf449ab937d3f7c87dc21386650fec14d454cddd94da7cb49f22cb633
- MD5 4cdf6092d3dfc711896bdf94a043df0a
- SHA1 0083740e8eec3893e7850dc51d3aca9105cd77d2
- SHA512 26f2b20532fe056f97c591fbb3087570c4f4f291247cacd957c8c758364ff3713acca55036c47f9f567b004ae2fa7b3664fc2106a5483c542838a0b9a04de025
- SSDEEP 49152:/rRokp+mUi6AjW/MUSdGRf3/b8xmN3Aek03noj45wlDTihKPgssSt2gUZqhaK6zY:/rRokVjxAZbeUJF3noxD2hv7Stix
- TLSH T1D1065C1167E48035E1B326318DB5A3599676BC609B328E8F23842E9D7FF1AD09E35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_4cdf6092d3dfc711896bdf94a043df0a_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_4cdf6092d3dfc711896bdf94a043df0a_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_4cdf6092d3dfc711896bdf94a043df0a_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop
- Size 3.7MB
- SHA256 15415dbaf449ab937d3f7c87dc21386650fec14d454cddd94da7cb49f22cb633
- MD5 4cdf6092d3dfc711896bdf94a043df0a
- SHA1 0083740e8eec3893e7850dc51d3aca9105cd77d2
- SHA512 26f2b20532fe056f97c591fbb3087570c4f4f291247cacd957c8c758364ff3713acca55036c47f9f567b004ae2fa7b3664fc2106a5483c542838a0b9a04de025
- SSDEEP 49152:/rRokp+mUi6AjW/MUSdGRf3/b8xmN3Aek03noj45wlDTihKPgssSt2gUZqhaK6zY:/rRokVjxAZbeUJF3noxD2hv7Stix
- TLSH T1D1065C1167E48035E1B326318DB5A3599676BC609B328E8F23842E9D7FF1AD09E35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.