General
- Target 2026-07-18_bbbd3fd59be23a638f9a5866ba427d78_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 3.2MB
- Sample260718-g9429set3z
- SHA256 8cf5462efa72a2fae7f4df5115ccb70e7c3ba1ca8513bb24d88f39fb20163cec
- MD5 bbbd3fd59be23a638f9a5866ba427d78
- SHA1 609e80812b227f637a7077eef13f46d7e19624ba
- SHA512 66c336195b979928135d80bfcdcfe242acc98fb5f85b0181fe83f0971d501e8f1b2a59f13eb59680bfd46c1e5815329f15e94905cea8994bb229fc05608c495c
- SSDEEP 49152:m34fZW7pR+wt7drl4nDSr0lGDuCZxBJCSGHq1pgG3nmmWZGDSW+SuhnikcBFA5Va:m34fZUpZt7dmmOcDA5VSv
- TLSH T1E1F55A0266FE6134F2FB2B30A83C56690EBA7E526F39C5DF9744185C0D706E099B1B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_bbbd3fd59be23a638f9a5866ba427d78_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_bbbd3fd59be23a638f9a5866ba427d78_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 3.2MB
- SHA256 8cf5462efa72a2fae7f4df5115ccb70e7c3ba1ca8513bb24d88f39fb20163cec
- MD5 bbbd3fd59be23a638f9a5866ba427d78
- SHA1 609e80812b227f637a7077eef13f46d7e19624ba
- SHA512 66c336195b979928135d80bfcdcfe242acc98fb5f85b0181fe83f0971d501e8f1b2a59f13eb59680bfd46c1e5815329f15e94905cea8994bb229fc05608c495c
- SSDEEP 49152:m34fZW7pR+wt7drl4nDSr0lGDuCZxBJCSGHq1pgG3nmmWZGDSW+SuhnikcBFA5Va:m34fZUpZt7dmmOcDA5VSv
- TLSH T1E1F55A0266FE6134F2FB2B30A83C56690EBA7E526F39C5DF9744185C0D706E099B1B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1