General
- Target 2026-08-05_301026e4ac8226a123d0788257edb5d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
- Size 3.7MB
- Sample260805-nc5qvsen3t
- SHA256 78b208ed88bed9520a1456fdc66d07ec7f0f30bbd52cbb2a3bb2ad7f710a7b28
- MD5 301026e4ac8226a123d0788257edb5d0
- SHA1 1f321021ea0a2e94ba0a991488bfbbb63660755d
- SHA512 1fca6ab05b120b4ecc7d75c3d90428b7b786cc7d73ed6836bcdfe0cafcfbb0f22299f85d28473a5e468751a6b75a37de40d28be4c736390a83cf0c4fe7f05467
- SSDEEP 49152:BjJ3ihfbr+loZfKUi+AQbjgHpkTqaWzkPE7Y4oYovj7uoZFajSgVCaQVgm+dvtD5:BJ3ihDYoZyUQQbjKfzJY4zCkjSraBm
- TLSH T187068CB279908075D3A20130DD2DAB756FBCB62F0BF389EB77C4496C5A709C27A35606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_301026e4ac8226a123d0788257edb5d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_301026e4ac8226a123d0788257edb5d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_301026e4ac8226a123d0788257edb5d0_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
- Size 3.7MB
- SHA256 78b208ed88bed9520a1456fdc66d07ec7f0f30bbd52cbb2a3bb2ad7f710a7b28
- MD5 301026e4ac8226a123d0788257edb5d0
- SHA1 1f321021ea0a2e94ba0a991488bfbbb63660755d
- SHA512 1fca6ab05b120b4ecc7d75c3d90428b7b786cc7d73ed6836bcdfe0cafcfbb0f22299f85d28473a5e468751a6b75a37de40d28be4c736390a83cf0c4fe7f05467
- SSDEEP 49152:BjJ3ihfbr+loZfKUi+AQbjgHpkTqaWzkPE7Y4oYovj7uoZFajSgVCaQVgm+dvtD5:BJ3ihDYoZyUQQbjKfzJY4zCkjSraBm
- TLSH T187068CB279908075D3A20130DD2DAB756FBCB62F0BF389EB77C4496C5A709C27A35606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting