General
- Target 2026-08-08_bf485c0350aa68f9cb4b37c2459e0558_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 54.4MB
- Sample260808-vwkclavyfz
- SHA256 b917ff2b0da4d16e56cf52a5786956979a8342def15470159e01c8cc1aab52f2
- MD5 bf485c0350aa68f9cb4b37c2459e0558
- SHA1 bf09dc7574d20d87171f086dce16d885d522a78b
- SHA512 8ea663e494ac296d2bd079dfc7d44effbefcf7b1b2583594e63bd2eb02af3d55789594f3738b60b182d5ac7679492a983828d10ccd09fd58569a2729ac07a4b2
- SSDEEP 98304:wMMMMCVNBw4MLMMMMCVNBw4MLMMMMCVNBw4MLMMMMCVNBw4MLMMMMCVNBw4MLMMF:dhhhhhh1FIF0wuzhhhhhh1FIF0wuU
- TLSH T135C78E50B9E54CA2E972113D49F7C376563CF9E04B238B9BA32866371F22BD168E4707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bf485c0350aa68f9cb4b37c2459e0558_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_bf485c0350aa68f9cb4b37c2459e0558_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bf485c0350aa68f9cb4b37c2459e0558_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 54.4MB
- SHA256 b917ff2b0da4d16e56cf52a5786956979a8342def15470159e01c8cc1aab52f2
- MD5 bf485c0350aa68f9cb4b37c2459e0558
- SHA1 bf09dc7574d20d87171f086dce16d885d522a78b
- SHA512 8ea663e494ac296d2bd079dfc7d44effbefcf7b1b2583594e63bd2eb02af3d55789594f3738b60b182d5ac7679492a983828d10ccd09fd58569a2729ac07a4b2
- SSDEEP 98304:wMMMMCVNBw4MLMMMMCVNBw4MLMMMMCVNBw4MLMMMMCVNBw4MLMMMMCVNBw4MLMMF:dhhhhhh1FIF0wuzhhhhhh1FIF0wuU
- TLSH T135C78E50B9E54CA2E972113D49F7C376563CF9E04B238B9BA32866371F22BD168E4707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1