General
- Target 2026-08-04_6ad3e8b71854b234abb6cbf9e220fdc9_akira_amadey_darkgate_elex_glassworm_helldown_luca-stealer_medusalocker_njrat_play_remcos_smoke-loader
- Size 29.9MB
- Sample260804-2syjdafl6v
- SHA256 b5cc7ab25d301d66d2bb347fcbbb4e7dd86ffd7b6c71c576580303e76c442d7c
- MD5 6ad3e8b71854b234abb6cbf9e220fdc9
- SHA1 ce4805d5c10090b16630a653a452305dd0d97f48
- SHA512 9f4664ca68826414d3986a28807ea05dd009d4d66dba630e73e8e41decf9c8798feee3b4ba3a189461ff82d947a9ab59a1eaecbfc950e08bfe6dea21b4afd969
- SSDEEP 786432:DJx08YcB4hE61mr+bVt/B7mmJSRsNdLyvMOKEa7:DxYcBgE9vMOKEa7
- TLSH T18267BF01F78350B9C80B0675206FF36EAB396E25433987E7A7E42E25BC717C11E39A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-04_6ad3e8b71854b234abb6cbf9e220fdc9_akira_amadey_darkgate_elex_glassworm_helldown_luca-steal.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6ad3e8b71854b234abb6cbf9e220fdc9_akira_amadey_darkgate_elex_glassworm_helldown_luca-steal.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6ad3e8b71854b234abb6cbf9e220fdc9_akira_amadey_darkgate_elex_glassworm_helldown_luca-stealer_medusalocker_njrat_play_remcos_smoke-loader
- Size 29.9MB
- SHA256 b5cc7ab25d301d66d2bb347fcbbb4e7dd86ffd7b6c71c576580303e76c442d7c
- MD5 6ad3e8b71854b234abb6cbf9e220fdc9
- SHA1 ce4805d5c10090b16630a653a452305dd0d97f48
- SHA512 9f4664ca68826414d3986a28807ea05dd009d4d66dba630e73e8e41decf9c8798feee3b4ba3a189461ff82d947a9ab59a1eaecbfc950e08bfe6dea21b4afd969
- SSDEEP 786432:DJx08YcB4hE61mr+bVt/B7mmJSRsNdLyvMOKEa7:DxYcBgE9vMOKEa7
- TLSH T18267BF01F78350B9C80B0675206FF36EAB396E25433987E7A7E42E25BC717C11E39A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies file permissions
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.