General
- Target 2026-08-07_8fe36b9b8cb0ccdab5391a80ddeb61e4_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260807-l3eagsbp2w
- SHA256 f29a4eace9fb5843c98427738daaab563c97a3e355443568af9281a226c8c449
- MD5 8fe36b9b8cb0ccdab5391a80ddeb61e4
- SHA1 cbcde0002cfa68d2818d63f567cb1a5322c4e58f
- SHA512 8d24fd300c7ff1615c12f367198c353d03fae2dd01f28f16be3a8549613e1b6b86c3b9de0210cd02194428840b9a772324a4544aafb313958bc9111de213c08c
- SSDEEP 24576:RCO+yNJPB4Le+b2vLt0jThwh+8ZZcnqrbiW3jSBu6M7ClVYU51ifrX4vTJgegiS:myjGSp4TG+CcnqKW3+Mh2lGEiDX4PS
- TLSH T1CE65E040B9E28071D1A02970B4B97B7B483D3D640F349EDB97D80DA95A706C14AF7FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_8fe36b9b8cb0ccdab5391a80ddeb61e4_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_8fe36b9b8cb0ccdab5391a80ddeb61e4_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_8fe36b9b8cb0ccdab5391a80ddeb61e4_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 f29a4eace9fb5843c98427738daaab563c97a3e355443568af9281a226c8c449
- MD5 8fe36b9b8cb0ccdab5391a80ddeb61e4
- SHA1 cbcde0002cfa68d2818d63f567cb1a5322c4e58f
- SHA512 8d24fd300c7ff1615c12f367198c353d03fae2dd01f28f16be3a8549613e1b6b86c3b9de0210cd02194428840b9a772324a4544aafb313958bc9111de213c08c
- SSDEEP 24576:RCO+yNJPB4Le+b2vLt0jThwh+8ZZcnqrbiW3jSBu6M7ClVYU51ifrX4vTJgegiS:myjGSp4TG+CcnqKW3+Mh2lGEiDX4PS
- TLSH T1CE65E040B9E28071D1A02970B4B97B7B483D3D640F349EDB97D80DA95A706C14AF7FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE