General

  • Target
    2026-08-04_6ad3e8b71854b234abb6cbf9e220fdc9_akira_amadey_darkgate_elex_glassworm_helldown_luca-stealer_medusalocker_njrat_play_remcos_smoke-loader
  • Size 29.9MB
  • Sample260804-2syjdafl6v
  • SHA256 b5cc7ab25d301d66d2bb347fcbbb4e7dd86ffd7b6c71c576580303e76c442d7c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-04_6ad3e8b71854b234abb6cbf9e220fdc9_akira_amadey_darkgate_elex_glassworm_helldown_luca-stealer_medusalocker_njrat_play_remcos_smoke-loader
    • Size 29.9MB
    • SHA256 b5cc7ab25d301d66d2bb347fcbbb4e7dd86ffd7b6c71c576580303e76c442d7c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies file permissions

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks