General
- Target 2026-07-02_6b28b6e7089ace3857c91e28f26d7132_amadey_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_smoke-loader
- Size 3.6MB
- Sample260702-2qb8csfz9y
- SHA256 754710856b54408bd696f2f4ee246bdd56d27ce7a7e1f98b3783cbef71ee14d4
- MD5 6b28b6e7089ace3857c91e28f26d7132
- SHA1 33113a2a8c044ace7f565dd8da20fb8b4adb9fc6
- SHA512 39c67029d8eb81193b4572dfe43bd3539019d730a088f111da6ac53aecab65f1b091be074839991be6554221ff6d30afe1467b763c49d13d030abe4bb20e9361
- SSDEEP 49152:S1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5gUmCmIZDgNWT30UNJqu1ZOWX/Q/q:DnCG4h7FiRA7WkAbJbrCmIZDjNJpSLm
- TLSH T18C06BF21BDB18427C46303728D6EF67D316DBD642B3481C763CB3A5C39386E15A3A6A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_6b28b6e7089ace3857c91e28f26d7132_amadey_darkgate_elex_glassworm_luca-stealer_magniber_mes.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_6b28b6e7089ace3857c91e28f26d7132_amadey_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_smoke-loader
- Size 3.6MB
- SHA256 754710856b54408bd696f2f4ee246bdd56d27ce7a7e1f98b3783cbef71ee14d4
- MD5 6b28b6e7089ace3857c91e28f26d7132
- SHA1 33113a2a8c044ace7f565dd8da20fb8b4adb9fc6
- SHA512 39c67029d8eb81193b4572dfe43bd3539019d730a088f111da6ac53aecab65f1b091be074839991be6554221ff6d30afe1467b763c49d13d030abe4bb20e9361
- SSDEEP 49152:S1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5gUmCmIZDgNWT30UNJqu1ZOWX/Q/q:DnCG4h7FiRA7WkAbJbrCmIZDjNJpSLm
- TLSH T18C06BF21BDB18427C46303728D6EF67D316DBD642B3481C763CB3A5C39386E15A3A6A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1