General
- Target 2026-05-16_7046a29baadc80537f6ca6466a1cd915_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
- Size 33.3MB
- Sample260516-264ybaas71
- SHA256 b52a68d5e172100cc9a24688846e60c2dbd3271cd83bbabd3b8d8078cda0ebda
- MD5 7046a29baadc80537f6ca6466a1cd915
- SHA1 f43925cfc06c6ade4508a882e0863d3edb4b5690
- SHA512 0efd1e7318a35896d8d8134f338b66891a6bc206ded0ede564b515eea00dd8e70d1ba12b4fcf21268c0c4437a2072b800809ed3f7d2fd841d0c6332ec4ead3a4
- SSDEEP 393216:f6dsBbb8dzF/uMq5gdOn1O4qQp0vgX98tqiHxenu4TShuN3Tny:O6bMeOmu4TJTny
- TLSH T1B8779E22F6418232C85396F49547B2B88B34BE615722DAC7798E7D1CFFB12C199383D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-16_7046a29baadc80537f6ca6466a1cd915_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_lu.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_7046a29baadc80537f6ca6466a1cd915_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_lu.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_7046a29baadc80537f6ca6466a1cd915_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
- Size 33.3MB
- SHA256 b52a68d5e172100cc9a24688846e60c2dbd3271cd83bbabd3b8d8078cda0ebda
- MD5 7046a29baadc80537f6ca6466a1cd915
- SHA1 f43925cfc06c6ade4508a882e0863d3edb4b5690
- SHA512 0efd1e7318a35896d8d8134f338b66891a6bc206ded0ede564b515eea00dd8e70d1ba12b4fcf21268c0c4437a2072b800809ed3f7d2fd841d0c6332ec4ead3a4
- SSDEEP 393216:f6dsBbb8dzF/uMq5gdOn1O4qQp0vgX98tqiHxenu4TShuN3Tny:O6bMeOmu4TJTny
- TLSH T1B8779E22F6418232C85396F49547B2B88B34BE615722DAC7798E7D1CFFB12C199383D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables embedding anti-forensic artifacts of deleting shim cache
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.