General
- Target 2026-07-05_d62ff3544f6562106e1b7221072de591_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- Sample260705-ns4thab16x
- SHA256 e9292cede33be6b995bcf59a43fda1429ccd16672e05ddd8706f3355f482bb56
- MD5 d62ff3544f6562106e1b7221072de591
- SHA1 e43e598bcbefc3e890a990b47524bba1e0055cc6
- SHA512 07abd99ad5f2b9155b195bafe6f8a385c7121eb4b2674a70a910f4bdc7a6c5380d7754fd7047e69e417d483330353b2db902dbf5d5fd4c6362035bd292252b3f
- SSDEEP 49152:sC1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqfxZOWXz:CnCG4h7FiRA7WkAbJ0rCmIZDjNJG5
- TLSH T165E59E21BDB14427C46303728D6EF67D316DBD741B3481C763CB3A5C29346E26A3A6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_d62ff3544f6562106e1b7221072de591_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_d62ff3544f6562106e1b7221072de591_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_d62ff3544f6562106e1b7221072de591_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- SHA256 e9292cede33be6b995bcf59a43fda1429ccd16672e05ddd8706f3355f482bb56
- MD5 d62ff3544f6562106e1b7221072de591
- SHA1 e43e598bcbefc3e890a990b47524bba1e0055cc6
- SHA512 07abd99ad5f2b9155b195bafe6f8a385c7121eb4b2674a70a910f4bdc7a6c5380d7754fd7047e69e417d483330353b2db902dbf5d5fd4c6362035bd292252b3f
- SSDEEP 49152:sC1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqfxZOWXz:CnCG4h7FiRA7WkAbJ0rCmIZDjNJG5
- TLSH T165E59E21BDB14427C46303728D6EF67D316DBD741B3481C763CB3A5C29346E26A3A6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory