General
- Target 2026-07-28_0a7effd7090c4df690c8280b9c3fc9e6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 27.5MB
- Sample260728-gpvm4afd34
- SHA256 b708587649ab4c65ac320b396a01f8a8f176d18909bcccd089bbe844bfac4bdb
- MD5 0a7effd7090c4df690c8280b9c3fc9e6
- SHA1 1d9e4f1787eb87fb5e1839d572428b8e18ae5301
- SHA512 714994b12e043ba9c9501a1571946ef4fbba023fcecba6074113362610152233df9263f6c01c61bd378c450b18dfc05e91f362e5713213aa00618a656b9a770e
- SSDEEP 393216:IbqOBCgPubB2CG1K6TRQgs3FFR+aDAYHmnVjMpG:MAgPBCCKdggzApnWpG
- TLSH T19757AE16F3908936C0BB073A686B4760633971194FB397C712D49AACBEAD3D12E3574B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_0a7effd7090c4df690c8280b9c3fc9e6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_0a7effd7090c4df690c8280b9c3fc9e6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_0a7effd7090c4df690c8280b9c3fc9e6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 27.5MB
- SHA256 b708587649ab4c65ac320b396a01f8a8f176d18909bcccd089bbe844bfac4bdb
- MD5 0a7effd7090c4df690c8280b9c3fc9e6
- SHA1 1d9e4f1787eb87fb5e1839d572428b8e18ae5301
- SHA512 714994b12e043ba9c9501a1571946ef4fbba023fcecba6074113362610152233df9263f6c01c61bd378c450b18dfc05e91f362e5713213aa00618a656b9a770e
- SSDEEP 393216:IbqOBCgPubB2CG1K6TRQgs3FFR+aDAYHmnVjMpG:MAgPBCCKdggzApnWpG
- TLSH T19757AE16F3908936C0BB073A686B4760633971194FB397C712D49AACBEAD3D12E3574B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.