General
- Target 2026-08-03_a6344c5157fa7a4050bf196d8e1fa513_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- Sample260803-vty3zatfrf
- SHA256 d3efbb1dba4983ff7ecc92e6c94b96d0dc416203e8adac704cf29294a62ad3d9
- MD5 a6344c5157fa7a4050bf196d8e1fa513
- SHA1 bea4ad1933936edb6aa49623efeeb3734fca0843
- SHA512 ee27fe7b8553149723c76f241cb36e98d0af9d28d17fe0f96f19fcc85a35f2192966fc231154238b5d5ea410b9560479c1b84a004f2f2d22f839d6a3e92d0147
- SSDEEP 49152:td1H1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqf3ZOWXy:bnCG4h7FiRA7WkAbJ0rCmIZDjNJE8
- TLSH T1E4E5AE21BDB14427C46303728D6EF67D316DBD741B3481C763CB3A582D386E26A3A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a6344c5157fa7a4050bf196d8e1fa513_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a6344c5157fa7a4050bf196d8e1fa513_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a6344c5157fa7a4050bf196d8e1fa513_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- SHA256 d3efbb1dba4983ff7ecc92e6c94b96d0dc416203e8adac704cf29294a62ad3d9
- MD5 a6344c5157fa7a4050bf196d8e1fa513
- SHA1 bea4ad1933936edb6aa49623efeeb3734fca0843
- SHA512 ee27fe7b8553149723c76f241cb36e98d0af9d28d17fe0f96f19fcc85a35f2192966fc231154238b5d5ea410b9560479c1b84a004f2f2d22f839d6a3e92d0147
- SSDEEP 49152:td1H1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqf3ZOWXy:bnCG4h7FiRA7WkAbJ0rCmIZDjNJE8
- TLSH T1E4E5AE21BDB14427C46303728D6EF67D316DBD741B3481C763CB3A582D386E26A3A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory