General
- Target 2026-08-10_6bcf143f9dd3ebefff0c75520f77c0ca_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat_revil_smoke-loader
- Size 8.3MB
- Sample260810-3vjzfacj7w
- SHA256 187781cf8c1300a51297eb36398763e63f97b872e5c5b4b9640a7ed23aec37cf
- MD5 6bcf143f9dd3ebefff0c75520f77c0ca
- SHA1 914db463afe8c452ba356f7da4e8443dd5b28292
- SHA512 932460602d16aa5d780bc845bb65615733c90ddbcd6706f4d187ea7a403e995d57696d0ba184d7fede6bdec558d2a508a6b9951187cb358e7207d32d7907332b
- SSDEEP 98304:RYi+Yu/C6hGfeZ1fezvepHFg0uaqrGtcKCd1xjqHjgam7WrVZhhHsQX7wRGpj3:RFuPx0zWZeraqatcKKvcVZHfLF9
- TLSH T1A396BF11FA01C039F8D202F687BD8BF9E97D9A24077560C753D46AAD9F305E23A35A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_6bcf143f9dd3ebefff0c75520f77c0ca_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_6bcf143f9dd3ebefff0c75520f77c0ca_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat_revil_smoke-loader
- Size 8.3MB
- SHA256 187781cf8c1300a51297eb36398763e63f97b872e5c5b4b9640a7ed23aec37cf
- MD5 6bcf143f9dd3ebefff0c75520f77c0ca
- SHA1 914db463afe8c452ba356f7da4e8443dd5b28292
- SHA512 932460602d16aa5d780bc845bb65615733c90ddbcd6706f4d187ea7a403e995d57696d0ba184d7fede6bdec558d2a508a6b9951187cb358e7207d32d7907332b
- SSDEEP 98304:RYi+Yu/C6hGfeZ1fezvepHFg0uaqrGtcKCd1xjqHjgam7WrVZhhHsQX7wRGpj3:RFuPx0zWZeraqatcKKvcVZHfLF9
- TLSH T1A396BF11FA01C039F8D202F687BD8BF9E97D9A24077560C753D46AAD9F305E23A35A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1