General

  • Target
    2026-07-15_5273c7506c09c21ca719dd0a0c2f6c19_amadey_cloudeye_darkgate_elex_gcleaner_glassworm_hijackloader_karagany_njrat_rhadamanthys_smoke-loader_stop
  • Size 17.6MB
  • Sample260716-aa52ysgw2l
  • SHA256 93d479c6fe722c47bc0fa716cc7db1a9e41e5a97c5c3ccdfe8c5f14854bf6804
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-15_5273c7506c09c21ca719dd0a0c2f6c19_amadey_cloudeye_darkgate_elex_gcleaner_glassworm_hijackloader_karagany_njrat_rhadamanthys_smoke-loader_stop
    • Size 17.6MB
    • SHA256 93d479c6fe722c47bc0fa716cc7db1a9e41e5a97c5c3ccdfe8c5f14854bf6804
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Creates new service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Stops running service(s)

MITRE ATT&CK Enterprise v16

Tasks