General
- Target 2026-07-28_19c6b519a125ce90036a898ffc42014b_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 22.3MB
- Sample260728-fkbtraycpg
- SHA256 2943377511a3d3d8248cbba5142792fcc30daa1e4e73f238d7df1d578579f8f8
- MD5 19c6b519a125ce90036a898ffc42014b
- SHA1 587eb08395d687746e4630d5101f37ddd50649d9
- SHA512 a95b6557b1ee984a7f02596caddfd21a3d097557cfffeebee89b4e0961087621b2e095cd58dd4b6b76bc08ed4badb6186e677d67cbdfe7265f43c98ad8aabfdb
- SSDEEP 196608:+O/ylPsWEVzIZ/16iA2qf/106Qkb9k8lB1EnhhueZ/gevje1Afd8Zh:fhV45xo106Qkb9kG1En1Led
- TLSH T1DA375A026694C816E1722B378CB9CAE4692A7D605F74D0CF3BC82F4C6D79B80AD71797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_19c6b519a125ce90036a898ffc42014b_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_19c6b519a125ce90036a898ffc42014b_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_19c6b519a125ce90036a898ffc42014b_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 22.3MB
- SHA256 2943377511a3d3d8248cbba5142792fcc30daa1e4e73f238d7df1d578579f8f8
- MD5 19c6b519a125ce90036a898ffc42014b
- SHA1 587eb08395d687746e4630d5101f37ddd50649d9
- SHA512 a95b6557b1ee984a7f02596caddfd21a3d097557cfffeebee89b4e0961087621b2e095cd58dd4b6b76bc08ed4badb6186e677d67cbdfe7265f43c98ad8aabfdb
- SSDEEP 196608:+O/ylPsWEVzIZ/16iA2qf/106Qkb9k8lB1EnhhueZ/gevje1Afd8Zh:fhV45xo106Qkb9kG1En1Led
- TLSH T1DA375A026694C816E1722B378CB9CAE4692A7D605F74D0CF3BC82F4C6D79B80AD71797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.