General
- Target 2026-07-02_e21892b4968e6893339dc7a023479784_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos_smoke-loader
- Size 5.5MB
- Sample260702-pzdfkaav3v
- SHA256 934f5573e4e43f8ef0f86a94f0ab1b9dba835cc5689519d9f5f2172561ce1fa8
- MD5 e21892b4968e6893339dc7a023479784
- SHA1 2491319b2cff39f948efbd2014b727f7a68fca42
- SHA512 6244bbb909ff30d8f692ed185262537bd16655f2bbb0f6d55de1491e0debf6bf03edc0f888915a0e3357fd18d2a2e8b7ba5b2127f5112d1efed3d6fd7c000aa1
- SSDEEP 98304:yfyvJmTWkJ5Lf26PfjWd68zQG3CmkQMf6XYe6iqf6leAGpW20RFh9aM3BW:yKvA5ESQM6qf6leAG2baM3
- TLSH T17A46D001A662C2F2D48101F0A67AB7757E3D4FA09339C6D3B6C40F6E58616E1EB32797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e21892b4968e6893339dc7a023479784_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e21892b4968e6893339dc7a023479784_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_e21892b4968e6893339dc7a023479784_amadey_darkgate_elex_luca-stealer_medusalocker_njrat_remcos_smoke-loader
- Size 5.5MB
- SHA256 934f5573e4e43f8ef0f86a94f0ab1b9dba835cc5689519d9f5f2172561ce1fa8
- MD5 e21892b4968e6893339dc7a023479784
- SHA1 2491319b2cff39f948efbd2014b727f7a68fca42
- SHA512 6244bbb909ff30d8f692ed185262537bd16655f2bbb0f6d55de1491e0debf6bf03edc0f888915a0e3357fd18d2a2e8b7ba5b2127f5112d1efed3d6fd7c000aa1
- SSDEEP 98304:yfyvJmTWkJ5Lf26PfjWd68zQG3CmkQMf6XYe6iqf6leAGpW20RFh9aM3BW:yKvA5ESQM6qf6leAG2baM3
- TLSH T17A46D001A662C2F2D48101F0A67AB7757E3D4FA09339C6D3B6C40F6E58616E1EB32797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.