General
- Target 2026-07-02_0487d8ebe43e5b1071032c226b2b1c31_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 12.1MB
- Sample260702-jtnrfset5s
- SHA256 b300bd228d6042f2971c289506db5e70e17a7074a538144be47e5e04f56f5711
- MD5 0487d8ebe43e5b1071032c226b2b1c31
- SHA1 28899c28b5e0e3214c0b69dbb622b3b9941a8987
- SHA512 83c8ba4bff5cc8c7f7535bc4382e82be30fd29c1ddac3b6d15d65cff773272096089d437600d785f730a42f55100e275f6736488c77fba45d0839d8835f4c442
- SSDEEP 196608:Bt63Ix4DU4942VG3C+Gi/AHwFYEv9eyV4IYATckv:u3IE4aL+GwAHwFYEv9eyV4A
- TLSH T169D60941E84299B5F5172E721A1AD3BB067F21304B35FDC3B2E46488AB12DEB077477A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0487d8ebe43e5b1071032c226b2b1c31_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0487d8ebe43e5b1071032c226b2b1c31_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0487d8ebe43e5b1071032c226b2b1c31_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 12.1MB
- SHA256 b300bd228d6042f2971c289506db5e70e17a7074a538144be47e5e04f56f5711
- MD5 0487d8ebe43e5b1071032c226b2b1c31
- SHA1 28899c28b5e0e3214c0b69dbb622b3b9941a8987
- SHA512 83c8ba4bff5cc8c7f7535bc4382e82be30fd29c1ddac3b6d15d65cff773272096089d437600d785f730a42f55100e275f6736488c77fba45d0839d8835f4c442
- SSDEEP 196608:Bt63Ix4DU4942VG3C+Gi/AHwFYEv9eyV4IYATckv:u3IE4aL+GwAHwFYEv9eyV4A
- TLSH T169D60941E84299B5F5172E721A1AD3BB067F21304B35FDC3B2E46488AB12DEB077477A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.