General
- Target 2026-07-23_7046e873c1a976200cf1e34a9fc0f3b3_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 3.5MB
- Sample260723-fer9jswvfv
- SHA256 0608ede04165ce9c182496e407ee2e80b14c40930e1178be35a01d50e8df201a
- MD5 7046e873c1a976200cf1e34a9fc0f3b3
- SHA1 98ec728012dcf0e3d57aa453f3760098b8d1b54b
- SHA512 78c4bd1ebc76e985d136629abac10fc0ce57f4054aff0dcf8f48cd7a7bf15ea0919e327074e6953ea7d6bdf9aabe8457e049a8d4c2d7da8ae246468c3c0dfe16
- SSDEEP 49152:0gyS7ZILTTD5FVN5O60ktt6bb93kDkxSQ1TiEPReGma53OtSSyqaB0zj0yjoB2:0gyI2hx1Dkx3HeGxzB2Yyjl
- TLSH T13E069D13B940C076E8D200B3D2BA5BB659299D3053B8D4D36F843CED6DF0AD26739B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_7046e873c1a976200cf1e34a9fc0f3b3_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_7046e873c1a976200cf1e34a9fc0f3b3_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 3.5MB
- SHA256 0608ede04165ce9c182496e407ee2e80b14c40930e1178be35a01d50e8df201a
- MD5 7046e873c1a976200cf1e34a9fc0f3b3
- SHA1 98ec728012dcf0e3d57aa453f3760098b8d1b54b
- SHA512 78c4bd1ebc76e985d136629abac10fc0ce57f4054aff0dcf8f48cd7a7bf15ea0919e327074e6953ea7d6bdf9aabe8457e049a8d4c2d7da8ae246468c3c0dfe16
- SSDEEP 49152:0gyS7ZILTTD5FVN5O60ktt6bb93kDkxSQ1TiEPReGma53OtSSyqaB0zj0yjoB2:0gyI2hx1Dkx3HeGxzB2Yyjl
- TLSH T13E069D13B940C076E8D200B3D2BA5BB659299D3053B8D4D36F843CED6DF0AD26739B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1