General
- Target 2026-08-04_fc1f6b7e2b3f66d6bed69c8a67f672bc_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 9.4MB
- Sample260804-qm2s3abe56
- SHA256 9381bfb6d71f8d73b732c51f214d26ead1860aeb4450303b6c726cdfbc2c7e2b
- MD5 fc1f6b7e2b3f66d6bed69c8a67f672bc
- SHA1 5ba2deafca9e18c136ef1c54a0cb01f1a7d97d74
- SHA512 e66fe521a1979303bb7ec581f35b1c75467eb2630e471dba172886b623d880e4acfe5a5bff921f2d72681cb1e9558ecec098b1e53c3dc7df19379232472b342c
- SSDEEP 196608:s/r4uYGnt0snLVQEPmpOdAmaeUW9Tg99b:Y4/Gnt0sLQpOdAref0T
- TLSH T1A4A66B307D01C136E99F01B2757CDBBB912D5A750B25A0C3B2D82E6A29BC5D2333DA5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fc1f6b7e2b3f66d6bed69c8a67f672bc_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fc1f6b7e2b3f66d6bed69c8a67f672bc_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 9.4MB
- SHA256 9381bfb6d71f8d73b732c51f214d26ead1860aeb4450303b6c726cdfbc2c7e2b
- MD5 fc1f6b7e2b3f66d6bed69c8a67f672bc
- SHA1 5ba2deafca9e18c136ef1c54a0cb01f1a7d97d74
- SHA512 e66fe521a1979303bb7ec581f35b1c75467eb2630e471dba172886b623d880e4acfe5a5bff921f2d72681cb1e9558ecec098b1e53c3dc7df19379232472b342c
- SSDEEP 196608:s/r4uYGnt0snLVQEPmpOdAmaeUW9Tg99b:Y4/Gnt0sLQpOdAref0T
- TLSH T1A4A66B307D01C136E99F01B2757CDBBB912D5A750B25A0C3B2D82E6A29BC5D2333DA5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1