General
- Target 2026-07-15_8c3f38466a6d22302637881ffc79459c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- Sample260715-qeadvags8s
- SHA256 b57dd48f861b9d182d88c2755bb179d3668bae470700d6ab8a1bba78b55b4a36
- MD5 8c3f38466a6d22302637881ffc79459c
- SHA1 872d9d986f38f09fb33561d9863521ff08cb37b9
- SHA512 3daef3f527bfb70df6a20fd7f93dd29ba5aa80de694a44f50af3c1d1ccb2dd4c21a527f841024be0c06921edcead9b47ee4f1a32ca86d23b6d6a3b1f00dd9295
- SSDEEP 49152:sB1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJq9RVZOWXJ:fnCG4h7FiRA7WkAbJ0rCmIZDjNJUfz
- TLSH T169E59D217DB1402AC46303724E6AFD3C396EBD6017B481E7A3CBFE586AB15E23A35157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_8c3f38466a6d22302637881ffc79459c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_8c3f38466a6d22302637881ffc79459c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_8c3f38466a6d22302637881ffc79459c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- SHA256 b57dd48f861b9d182d88c2755bb179d3668bae470700d6ab8a1bba78b55b4a36
- MD5 8c3f38466a6d22302637881ffc79459c
- SHA1 872d9d986f38f09fb33561d9863521ff08cb37b9
- SHA512 3daef3f527bfb70df6a20fd7f93dd29ba5aa80de694a44f50af3c1d1ccb2dd4c21a527f841024be0c06921edcead9b47ee4f1a32ca86d23b6d6a3b1f00dd9295
- SSDEEP 49152:sB1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJq9RVZOWXJ:fnCG4h7FiRA7WkAbJ0rCmIZDjNJUfz
- TLSH T169E59D217DB1402AC46303724E6AFD3C396EBD6017B481E7A3CBFE586AB15E23A35157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory