5db21c31c7f39c17eafc84f25e644a8b3db1d969a76f8acbbd9f5d5389382512 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-12...er.exe

windows10-2004-x64

7

2026-07-12...er.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-12_cfe746d0b8a97e53128b8c114ed70849_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader
Size 5.1MB
Sample260712-j9xpasew8p
SHA256 5db21c31c7f39c17eafc84f25e644a8b3db1d969a76f8acbbd9f5d5389382512
MD5 cfe746d0b8a97e53128b8c114ed70849
SHA1 c673c72a0ae23785eebfe74883312762e780899d
SHA512 faf5efd07650b1589f6020698d96efe3145aef97f14e81d9786fc5ced6dacf31a0ee2a22da9a129f84be6289a0e32074b500de8b9e2a579fe10618e9f60559b6
SSDEEP 98304:lIqf27KA1sOB1QixfhB2jTDwRVpLIFLOAkGkzdnEVomFHKnP0Y:lIqabvtAjTDwqFLOyomFHKnP/
TLSH
T13336AE21B95F40ABD17203709E58F63A936DADB01BF501CF728CB7691F316C22A35A97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-12_cfe746d0b8a97e53128b8c114ed70849_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-07-12_cfe746d0b8a97e53128b8c114ed70849_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  2026-07-12_cfe746d0b8a97e53128b8c114ed70849_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader
- Size 5.1MB
- SHA256 5db21c31c7f39c17eafc84f25e644a8b3db1d969a76f8acbbd9f5d5389382512
- MD5 cfe746d0b8a97e53128b8c114ed70849
- SHA1 c673c72a0ae23785eebfe74883312762e780899d
- SHA512 faf5efd07650b1589f6020698d96efe3145aef97f14e81d9786fc5ced6dacf31a0ee2a22da9a129f84be6289a0e32074b500de8b9e2a579fe10618e9f60559b6
- SSDEEP 98304:lIqf27KA1sOB1QixfhB2jTDwRVpLIFLOAkGkzdnEVomFHKnP0Y:lIqabvtAjTDwqFLOyomFHKnP/
- TLSH
  T13336AE21B95F40ABD17203709E58F63A936DADB01BF501CF728CB7691F316C22A35A97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence trojan
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy