General
- Target 2026-07-08_e23ada7dae23ea6d6cb7db07d7c04cef_amadey_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 278KB
- Sample260708-ckh2aah16l
- SHA256 11702717631c4c15e711cb4db2c1f3a43f377b79eb064676b7f17dea8f528bdc
- MD5 e23ada7dae23ea6d6cb7db07d7c04cef
- SHA1 4f8bb9334535a9aad92e3702fbaa15a57c793d16
- SHA512 a2fee2ea74c8ac1862112ee5af6fed1c840b978063caccba027a3ac1bf43a3b609ac63e7c92a5e37ed47b152710f81a193f734123c68ade8f3e917ea6c2b6460
- SSDEEP 6144:XNAT9rfBS0OfonRc7f1zBg4aE68dAOq0ZcPrvnGx+TeZMB:dARfBIoRc7fDItOs0ZcPrux+TeyB
- TLSH T1F4548D1275E280B2F5B319364DB8AAB259BDBD200931CE7F63D40A1EDE70581D636B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_e23ada7dae23ea6d6cb7db07d7c04cef_amadey_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_e23ada7dae23ea6d6cb7db07d7c04cef_amadey_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_e23ada7dae23ea6d6cb7db07d7c04cef_amadey_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 278KB
- SHA256 11702717631c4c15e711cb4db2c1f3a43f377b79eb064676b7f17dea8f528bdc
- MD5 e23ada7dae23ea6d6cb7db07d7c04cef
- SHA1 4f8bb9334535a9aad92e3702fbaa15a57c793d16
- SHA512 a2fee2ea74c8ac1862112ee5af6fed1c840b978063caccba027a3ac1bf43a3b609ac63e7c92a5e37ed47b152710f81a193f734123c68ade8f3e917ea6c2b6460
- SSDEEP 6144:XNAT9rfBS0OfonRc7f1zBg4aE68dAOq0ZcPrvnGx+TeZMB:dARfBIoRc7fDItOs0ZcPrux+TeyB
- TLSH T1F4548D1275E280B2F5B319364DB8AAB259BDBD200931CE7F63D40A1EDE70581D636B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.