General

  • Target
    2026-07-30_26d9ba63b413c3d4f8c84dd58bf96224_amadey_darkgate_elex_gcleaner_luca-stealer_njrat_smoke-loader
  • Size 1.7MB
  • Sample260730-s8zlyabh44
  • SHA256 0fea5d65cd27f7bf8019b2a3e38991e6a1ebb691a415b05840e2fd04bd50210a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-30_26d9ba63b413c3d4f8c84dd58bf96224_amadey_darkgate_elex_gcleaner_luca-stealer_njrat_smoke-loader
    • Size 1.7MB
    • SHA256 0fea5d65cd27f7bf8019b2a3e38991e6a1ebb691a415b05840e2fd04bd50210a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks