General

  • Target
    2026-05-16_7046a29baadc80537f6ca6466a1cd915_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
  • Size 33.3MB
  • Sample260516-264ybaas71
  • SHA256 b52a68d5e172100cc9a24688846e60c2dbd3271cd83bbabd3b8d8078cda0ebda
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-05-16_7046a29baadc80537f6ca6466a1cd915_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
    • Size 33.3MB
    • SHA256 b52a68d5e172100cc9a24688846e60c2dbd3271cd83bbabd3b8d8078cda0ebda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Detects executables embedding anti-forensic artifacts of deleting shim cache

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks