General
- Target 2026-08-04_96abb07576d601641b3fe123335d44ca_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 12.3MB
- Sample260804-2h8llahh39
- SHA256 52d8c9dde0a7251cd6b5458a04e00afdc4ddb816fe7162357819bcb894e1db9c
- MD5 96abb07576d601641b3fe123335d44ca
- SHA1 9febd5206744585da4be87f7cb0a23194c911a33
- SHA512 3efd2138c896170aa44fb1f9086c77276cc8ff3f1ac119cd78ae98b922a5b3619161d75044885cedd204734c40e85c233b330fdc412f15bb387eb64e02c8d89e
- SSDEEP 196608:Pv1z9OeI0UlkmjFWrGQCZ34klifpyaKptZ/z3j:Pp9Z7YWjCZ34k6vCz
- TLSH T1B9D69D2277C9C83BE27306778976CA55582DB9200F7490C7BA883A1D9F39BD16E36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_96abb07576d601641b3fe123335d44ca_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_96abb07576d601641b3fe123335d44ca_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_96abb07576d601641b3fe123335d44ca_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 12.3MB
- SHA256 52d8c9dde0a7251cd6b5458a04e00afdc4ddb816fe7162357819bcb894e1db9c
- MD5 96abb07576d601641b3fe123335d44ca
- SHA1 9febd5206744585da4be87f7cb0a23194c911a33
- SHA512 3efd2138c896170aa44fb1f9086c77276cc8ff3f1ac119cd78ae98b922a5b3619161d75044885cedd204734c40e85c233b330fdc412f15bb387eb64e02c8d89e
- SSDEEP 196608:Pv1z9OeI0UlkmjFWrGQCZ34klifpyaKptZ/z3j:Pp9Z7YWjCZ34k6vCz
- TLSH T1B9D69D2277C9C83BE27306778976CA55582DB9200F7490C7BA883A1D9F39BD16E36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.