General
- Target 2026-07-08_9c800bbebea229879333f945f4930066_amadey_darkgate_elex_kwampirs_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 5.6MB
- Sample260708-yy3thags8j
- SHA256 b24f77e6e45af5eda07b12b9e2d89f17edd3d0fee133602e35bc6baebf998ace
- MD5 9c800bbebea229879333f945f4930066
- SHA1 33d8bc87d2ceba4aed8eb01130f2d2debd64d3af
- SHA512 b8dd346d445618677ceeebe186432543861ab87b8b07f7f0ffeec23cfd267b6c2bd4e0e5d1c86dbd267bc1f804ad92882c5723a28749bc65449366112c508976
- SSDEEP 98304:c17ZpRN8f01iuciNu2zPnj/7pxXX/1PTJxjRXz+ZfkZcj:cPpRNwnYBzzXX/1LdzsPj
- TLSH T178465A06FFA45576E0B242318CB6774C95797EB21B32859B62843B0DEE31FC29931B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_9c800bbebea229879333f945f4930066_amadey_darkgate_elex_kwampirs_luca-stealer_njrat_redline.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_9c800bbebea229879333f945f4930066_amadey_darkgate_elex_kwampirs_luca-stealer_njrat_redline.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_9c800bbebea229879333f945f4930066_amadey_darkgate_elex_kwampirs_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 5.6MB
- SHA256 b24f77e6e45af5eda07b12b9e2d89f17edd3d0fee133602e35bc6baebf998ace
- MD5 9c800bbebea229879333f945f4930066
- SHA1 33d8bc87d2ceba4aed8eb01130f2d2debd64d3af
- SHA512 b8dd346d445618677ceeebe186432543861ab87b8b07f7f0ffeec23cfd267b6c2bd4e0e5d1c86dbd267bc1f804ad92882c5723a28749bc65449366112c508976
- SSDEEP 98304:c17ZpRN8f01iuciNu2zPnj/7pxXX/1PTJxjRXz+ZfkZcj:cPpRNwnYBzzXX/1LdzsPj
- TLSH T178465A06FFA45576E0B242318CB6774C95797EB21B32859B62843B0DEE31FC29931B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory