General
- Target 2026-07-28_44194e976fa637ff83d22e03b5e785bb_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 20.2MB
- Sample260728-gkm3fsfc94
- SHA256 5e9dc3083ac0f245e02f945ae5cd79853e9372cb334d688dbfdf0c5b2fb3b7b6
- MD5 44194e976fa637ff83d22e03b5e785bb
- SHA1 06afad10995f79d661c405f88ebc2d587e0450b7
- SHA512 2cc7918defc2d0f1a4b63f00fa6873b79c9dddc88d953bdb30b36e8fc82ab33ac7356ef49714669df3c8b703faeaaae382e7850e056ba7493145c5d8fea72a7f
- SSDEEP 196608:3DHaXXru9gTz9Z/OGDBEEE46HDekmPJdNKnIYMwloc7Z/Ce9Tu1Qfd8Af:3D6Xq9wzCSlE46jezPJdNKIYg296I
- TLSH T10D275A1263D98826E2B31F375C79DA9468297D201F34D4DB3B882B8C9D39BC1AE31757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_44194e976fa637ff83d22e03b5e785bb_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_44194e976fa637ff83d22e03b5e785bb_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_44194e976fa637ff83d22e03b5e785bb_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 20.2MB
- SHA256 5e9dc3083ac0f245e02f945ae5cd79853e9372cb334d688dbfdf0c5b2fb3b7b6
- MD5 44194e976fa637ff83d22e03b5e785bb
- SHA1 06afad10995f79d661c405f88ebc2d587e0450b7
- SHA512 2cc7918defc2d0f1a4b63f00fa6873b79c9dddc88d953bdb30b36e8fc82ab33ac7356ef49714669df3c8b703faeaaae382e7850e056ba7493145c5d8fea72a7f
- SSDEEP 196608:3DHaXXru9gTz9Z/OGDBEEE46HDekmPJdNKnIYMwloc7Z/Ce9Tu1Qfd8Af:3D6Xq9wzCSlE46jezPJdNKIYg296I
- TLSH T10D275A1263D98826E2B31F375C79DA9468297D201F34D4DB3B882B8C9D39BC1AE31757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.