General
- Target 2026-07-09_d316da4b0af6d37d337b628d2616a96a_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 3.4MB
- Sample260709-rs973ab12j
- SHA256 6de7e34dbe4d91d4dfdd47a16fa341836665af7c04df16fc8dd76d1d6015067e
- MD5 d316da4b0af6d37d337b628d2616a96a
- SHA1 ecf276e6bfc5c5ab9a5a7d7ec4fc98726ab29fa2
- SHA512 9854f30d0baec81ecb7557e75c40a3db01736dc42e207101152ebeb119b12e7aae6674424fa564da38a8d78697482819e908310966ebde778cb1179507c30fdc
- SSDEEP 49152:lf5ouMxf/8krPKgcyMU4zqPGjTFVvE+udDZFKSaYldusXd420oK+MuAQJjFnCgW/:lfGDuRrvvludHKosz2ansJFnCvYI
- TLSH T107F502123A55C2B2E5A210B2E8FDF7B758BCB5310B2446CBF3D80D6E59740D23A3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_d316da4b0af6d37d337b628d2616a96a_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_d316da4b0af6d37d337b628d2616a96a_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 3.4MB
- SHA256 6de7e34dbe4d91d4dfdd47a16fa341836665af7c04df16fc8dd76d1d6015067e
- MD5 d316da4b0af6d37d337b628d2616a96a
- SHA1 ecf276e6bfc5c5ab9a5a7d7ec4fc98726ab29fa2
- SHA512 9854f30d0baec81ecb7557e75c40a3db01736dc42e207101152ebeb119b12e7aae6674424fa564da38a8d78697482819e908310966ebde778cb1179507c30fdc
- SSDEEP 49152:lf5ouMxf/8krPKgcyMU4zqPGjTFVvE+udDZFKSaYldusXd420oK+MuAQJjFnCgW/:lfGDuRrvvludHKosz2ansJFnCvYI
- TLSH T107F502123A55C2B2E5A210B2E8FDF7B758BCB5310B2446CBF3D80D6E59740D23A3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.