General
- Target 2026-08-05_bde83fca838c620cea8771d0f0d5165c_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 5.6MB
- Sample260805-b8llmshm8z
- SHA256 fa52a3fdca5568b4e3ec681bd97fb69cc8b9bb00cf2e9f914055687054ea031d
- MD5 bde83fca838c620cea8771d0f0d5165c
- SHA1 273a353cbf6d24670668cb22e9592ab9a33363d1
- SHA512 195661744e3d5d699d217640c514e322cdb8c2ddb3e1614871e7c2c7f5d7e5e042512fb2c323328988bae886ca5f122460f86c9bcbd969fd7b3436e1860c657d
- SSDEEP 49152:7XtQN5q+390dfE1Yl/Blps1c7QJ6WtZnSdyHclTZ8blUfzN4jH3PlyjYpOLqd/k9:7dWUp2ckJ6MneElezN47flyNLqBkhPW
- TLSH T139469E13E360C53AF09786364977D2795A3BBA201B16D8CB57E08D28CE356D06A3F397
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_bde83fca838c620cea8771d0f0d5165c_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_bde83fca838c620cea8771d0f0d5165c_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 5.6MB
- SHA256 fa52a3fdca5568b4e3ec681bd97fb69cc8b9bb00cf2e9f914055687054ea031d
- MD5 bde83fca838c620cea8771d0f0d5165c
- SHA1 273a353cbf6d24670668cb22e9592ab9a33363d1
- SHA512 195661744e3d5d699d217640c514e322cdb8c2ddb3e1614871e7c2c7f5d7e5e042512fb2c323328988bae886ca5f122460f86c9bcbd969fd7b3436e1860c657d
- SSDEEP 49152:7XtQN5q+390dfE1Yl/Blps1c7QJ6WtZnSdyHclTZ8blUfzN4jH3PlyjYpOLqd/k9:7dWUp2ckJ6MneElezN47flyNLqBkhPW
- TLSH T139469E13E360C53AF09786364977D2795A3BBA201B16D8CB57E08D28CE356D06A3F397
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.