General
- Target 2026-08-02_3c63de4c856d200a48390d5e50332b84_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 3.8MB
- Sample260802-xl8csazcpb
- SHA256 273d110746cb93cee8e21c4ebc751b1cbf6c034b17af2dbdc28fe2f1ec826c3d
- MD5 3c63de4c856d200a48390d5e50332b84
- SHA1 54568fa85c30f5f337520070259bf803db2c11b0
- SHA512 6577aa5e6d037ca44c96698d86174469e77b63156bc001abe5c932f5bbe1abe6ff8f35e4e51a3cef0d9f4200c182b556ba8bdf5a767723f88fc6f5b77cc3ffe1
- SSDEEP 49152:jj9LxcO4Q5YtNPFqKzT2bo4+JZmxSftT0MjL/gxkOjc9210NLgVLKRWTQ6Zs5Dh0:jjBxcO4EYt1fVIxQeMjLsAAZKRuy5at
- TLSH T1EE068D02E3824076D9B2357C446A77751638BF701F32C6DBAB40752AEAF1BC159363AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-02_3c63de4c856d200a48390d5e50332b84_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_3c63de4c856d200a48390d5e50332b84_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_3c63de4c856d200a48390d5e50332b84_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 3.8MB
- SHA256 273d110746cb93cee8e21c4ebc751b1cbf6c034b17af2dbdc28fe2f1ec826c3d
- MD5 3c63de4c856d200a48390d5e50332b84
- SHA1 54568fa85c30f5f337520070259bf803db2c11b0
- SHA512 6577aa5e6d037ca44c96698d86174469e77b63156bc001abe5c932f5bbe1abe6ff8f35e4e51a3cef0d9f4200c182b556ba8bdf5a767723f88fc6f5b77cc3ffe1
- SSDEEP 49152:jj9LxcO4Q5YtNPFqKzT2bo4+JZmxSftT0MjL/gxkOjc9210NLgVLKRWTQ6Zs5Dh0:jjBxcO4EYt1fVIxQeMjLsAAZKRuy5at
- TLSH T1EE068D02E3824076D9B2357C446A77751638BF701F32C6DBAB40752AEAF1BC159363AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application
Drops file in System32 directory