General
- Target 2026-07-14_3be29854d4e813ceefc0748c2113fc7d_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 9.9MB
- Sample260714-2dx93aey7n
- SHA256 197a6d710bc69dfa14e6e8e5859a88d5847ef37e24183609cdf3f459067c7d4a
- MD5 3be29854d4e813ceefc0748c2113fc7d
- SHA1 c91d021936679c62acc7322194644ba196f2a173
- SHA512 11fbb62b8a1a2c529e33d829cca59c9c1bc14b6df393b62027141403c33e5d872988aae12b1a9b31bb5b36426feb5de21b483602fbc9d55f09bacf7e9d008f83
- SSDEEP 196608:yuaKdyowOgW9klMyKgOURi6Uekmes9qRZuB/6ZTYm2m2372222222qbRgp2OcW:EKgdtVRKmK4/6ZF2m2L2222222qbRgp4
- TLSH T1B6A68C11B241C1A6D6D111B0AD7EFB6A916DBF758F2464CB63C83F2E1C311C37A3AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_3be29854d4e813ceefc0748c2113fc7d_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_3be29854d4e813ceefc0748c2113fc7d_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_3be29854d4e813ceefc0748c2113fc7d_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 9.9MB
- SHA256 197a6d710bc69dfa14e6e8e5859a88d5847ef37e24183609cdf3f459067c7d4a
- MD5 3be29854d4e813ceefc0748c2113fc7d
- SHA1 c91d021936679c62acc7322194644ba196f2a173
- SHA512 11fbb62b8a1a2c529e33d829cca59c9c1bc14b6df393b62027141403c33e5d872988aae12b1a9b31bb5b36426feb5de21b483602fbc9d55f09bacf7e9d008f83
- SSDEEP 196608:yuaKdyowOgW9klMyKgOURi6Uekmes9qRZuB/6ZTYm2m2372222222qbRgp2OcW:EKgdtVRKmK4/6ZF2m2L2222222qbRgp4
- TLSH T1B6A68C11B241C1A6D6D111B0AD7EFB6A916DBF758F2464CB63C83F2E1C311C37A3AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.