General
- Target 2026-07-02_4a766c1ca29f58161ac2730f9d24c5b5_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_smoke-loader
- Size 12.1MB
- Sample260702-nv3dfsfw4r
- SHA256 6a7090f886b2aa503c794c9f4b56cd6e023d9a7c074714a047365d04c7005a66
- MD5 4a766c1ca29f58161ac2730f9d24c5b5
- SHA1 52719e50060e18a2ae292a4120814e34cd9a9811
- SHA512 c4a1dc1a00cf28a0f0d96b68b9f3641891cc26ce0f444a01e32dfe5b809e2f7528990f0b59f6be19816ad8f0362f4f06c2dd4650510eb465ae805dcfbf42c4e8
- SSDEEP 196608:P5kxwyeeGJOYakuW+Cco2tste36+AgPyzygz:P5kKdNPz5teKt1zygz
- TLSH T18DD66D30B747C936D5C242BA05ADFB7E86599B580F3515C3C2982F2AE5746F31F328A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_4a766c1ca29f58161ac2730f9d24c5b5_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_4a766c1ca29f58161ac2730f9d24c5b5_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_4a766c1ca29f58161ac2730f9d24c5b5_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_smoke-loader
- Size 12.1MB
- SHA256 6a7090f886b2aa503c794c9f4b56cd6e023d9a7c074714a047365d04c7005a66
- MD5 4a766c1ca29f58161ac2730f9d24c5b5
- SHA1 52719e50060e18a2ae292a4120814e34cd9a9811
- SHA512 c4a1dc1a00cf28a0f0d96b68b9f3641891cc26ce0f444a01e32dfe5b809e2f7528990f0b59f6be19816ad8f0362f4f06c2dd4650510eb465ae805dcfbf42c4e8
- SSDEEP 196608:P5kxwyeeGJOYakuW+Cco2tste36+AgPyzygz:P5kKdNPz5teKt1zygz
- TLSH T18DD66D30B747C936D5C242BA05ADFB7E86599B580F3515C3C2982F2AE5746F31F328A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.