General
- Target 2026-07-28_73bffe782e85258c23b7f8f010c13d4b_amadey_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos_smoke-loader
- Size 3.9MB
- Sample260728-tf4kvszbla
- SHA256 03058c0a64fb68520cccb006f5fd64b1141f45f07a6c0298f1ddcbf82333e359
- MD5 73bffe782e85258c23b7f8f010c13d4b
- SHA1 7ecd870fd580ab56629dc2e43e2a937c75976f19
- SHA512 0330233b6d4098f221643ad18fd7742800832d7a43e902e144617c524e04b6e362eb7da019cc1fea0ff52f9b4071fa2363a97d3f38b7cb0e3b1e799dad8dd474
- SSDEEP 98304:rAFjshfv1tOw71Pui4n7g1pnn/uYj3RfdiWmooK6RrMhZU/5GfzFf2:rAFja9xuYT0xH/Af
- TLSH T157169F12BAA48836E6B20331482C77D155EDBDB11D354507A7E8372D1AB09E3EB25F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-28_73bffe782e85258c23b7f8f010c13d4b_amadey_darkgate_elex_glassworm_luca-stealer_magniber_med.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_73bffe782e85258c23b7f8f010c13d4b_amadey_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos_smoke-loader
- Size 3.9MB
- SHA256 03058c0a64fb68520cccb006f5fd64b1141f45f07a6c0298f1ddcbf82333e359
- MD5 73bffe782e85258c23b7f8f010c13d4b
- SHA1 7ecd870fd580ab56629dc2e43e2a937c75976f19
- SHA512 0330233b6d4098f221643ad18fd7742800832d7a43e902e144617c524e04b6e362eb7da019cc1fea0ff52f9b4071fa2363a97d3f38b7cb0e3b1e799dad8dd474
- SSDEEP 98304:rAFjshfv1tOw71Pui4n7g1pnn/uYj3RfdiWmooK6RrMhZU/5GfzFf2:rAFja9xuYT0xH/Af
- TLSH T157169F12BAA48836E6B20331482C77D155EDBDB11D354507A7E8372D1AB09E3EB25F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.