General
- Target 2026-07-07_c5ba9b6a14f43119b415543fa8f6d5b7_amadey_darkgate_elex_luca-stealer_njrat_redline-stealer_smoke-loader_stealc_tofsee
- Size 36.0MB
- Sample260707-ly5lwact3l
- SHA256 cf636c9ef1ffa1d4677cb249afcc8a397aed408cbd4ad6b9a1ad61ba2a391aa3
- MD5 c5ba9b6a14f43119b415543fa8f6d5b7
- SHA1 14f8b44355625c869242e69e86ae8d5f730f14f1
- SHA512 739eafba912be25050a3df731efaef5f860e24c3bfd991fba9aa67609de2d7ad01646ed1ae41b52de55afa1acb48d6bfc7a110b4a34749e23182f36ca207d176
- SSDEEP 786432:WJqHlyDSs9JTV8ISoZCIu/YFILsmCJb4uUWVGTQ80gwvdN0GK7K7:WJqHlyDSsLB8pBVaI2Jb4uU1Nwv8A
- TLSH T16C8712A03A5FC876E56E15F0956EEAAE913C6D710FB044D773DEB91927390C20232E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-07_c5ba9b6a14f43119b415543fa8f6d5b7_amadey_darkgate_elex_luca-stealer_njrat_redline-stealer_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c5ba9b6a14f43119b415543fa8f6d5b7_amadey_darkgate_elex_luca-stealer_njrat_redline-stealer_.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c5ba9b6a14f43119b415543fa8f6d5b7_amadey_darkgate_elex_luca-stealer_njrat_redline-stealer_smoke-loader_stealc_tofsee
- Size 36.0MB
- SHA256 cf636c9ef1ffa1d4677cb249afcc8a397aed408cbd4ad6b9a1ad61ba2a391aa3
- MD5 c5ba9b6a14f43119b415543fa8f6d5b7
- SHA1 14f8b44355625c869242e69e86ae8d5f730f14f1
- SHA512 739eafba912be25050a3df731efaef5f860e24c3bfd991fba9aa67609de2d7ad01646ed1ae41b52de55afa1acb48d6bfc7a110b4a34749e23182f36ca207d176
- SSDEEP 786432:WJqHlyDSs9JTV8ISoZCIu/YFILsmCJb4uUWVGTQ80gwvdN0GK7K7:WJqHlyDSsLB8pBVaI2Jb4uU1Nwv8A
- TLSH T16C8712A03A5FC876E56E15F0956EEAAE913C6D710FB044D773DEB91927390C20232E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.