General
- Target 2026-06-26_d4540be41b93026fbe909d0897507f8c_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luca-stealer_njrat_plugx_remcos_smoke-loader
- Size 19.2MB
- Sample260629-n68plset7l
- SHA256 8f078d41f1a94a420da647c7b959a4a61d63bc8caf8e3747aecf2d48955989d1
- MD5 d4540be41b93026fbe909d0897507f8c
- SHA1 135f79e142ef912272e6861f164b74cc193ccc4e
- SHA512 3224b2df3aa8d30a9998e7f838a87a71216645aef36878f88d09af742177bdec52c5535ec6672fda958896749e48c1b595cb3279256ad22cbff2346366786be6
- SSDEEP 393216:mOp4q1ae6/CksST3fTQW6OKEIrqNp/8ZF9kvEBP0d:mOJ1mRvMOKEaZF9kvEBY
- TLSH T12417CF41FAC240F9C45F05B0751EF33FDB39AE244738C6A3E7E82E19ADB13A0596A516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d4540be41b93026fbe909d0897507f8c_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d4540be41b93026fbe909d0897507f8c_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d4540be41b93026fbe909d0897507f8c_akira_amadey_darkgate_elex_glassworm_helldown_icedid_luca-stealer_njrat_plugx_remcos_smoke-loader
- Size 19.2MB
- SHA256 8f078d41f1a94a420da647c7b959a4a61d63bc8caf8e3747aecf2d48955989d1
- MD5 d4540be41b93026fbe909d0897507f8c
- SHA1 135f79e142ef912272e6861f164b74cc193ccc4e
- SHA512 3224b2df3aa8d30a9998e7f838a87a71216645aef36878f88d09af742177bdec52c5535ec6672fda958896749e48c1b595cb3279256ad22cbff2346366786be6
- SSDEEP 393216:mOp4q1ae6/CksST3fTQW6OKEIrqNp/8ZF9kvEBP0d:mOJ1mRvMOKEaZF9kvEBY
- TLSH T12417CF41FAC240F9C45F05B0751EF33FDB39AE244738C6A3E7E82E19ADB13A0596A516
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables using Telegram Chat Bot
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.