General
- Target 2026-08-14_ccda1cd8ce218f362ac7154a29074170_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_metamorfo_njrat_smoke-loader
- Size 3.5MB
- Sample260814-pptpssbk7w
- SHA256 5d191cdb7bb260f627e25dd8c32073025bceea86ecb889f74c28cdacbb936243
- MD5 ccda1cd8ce218f362ac7154a29074170
- SHA1 5456484b8150ef62ea0fcd2aa314fd53c2125aa6
- SHA512 3d8218dcc87d8277c6b080dce053151b9559fe15cc838ffdd1dbd204e888eb4375b6e21c90d4a0f23187798b296260b03ae0ce8664e104099861f9c206d1ad29
- SSDEEP 98304:BehEYSHVilASORPenmS1W0ozi30F/yiW7VNki6:8GYSHVilYPmW0clEVNkl
- TLSH T1D6F59E1266C484F9E3920270DE89FAAC47ACBEB493FF58B7779118CD6921DC2712524F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_ccda1cd8ce218f362ac7154a29074170_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_ccda1cd8ce218f362ac7154a29074170_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_ccda1cd8ce218f362ac7154a29074170_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_metamorfo_njrat_smoke-loader
- Size 3.5MB
- SHA256 5d191cdb7bb260f627e25dd8c32073025bceea86ecb889f74c28cdacbb936243
- MD5 ccda1cd8ce218f362ac7154a29074170
- SHA1 5456484b8150ef62ea0fcd2aa314fd53c2125aa6
- SHA512 3d8218dcc87d8277c6b080dce053151b9559fe15cc838ffdd1dbd204e888eb4375b6e21c90d4a0f23187798b296260b03ae0ce8664e104099861f9c206d1ad29
- SSDEEP 98304:BehEYSHVilASORPenmS1W0ozi30F/yiW7VNki6:8GYSHVilYPmW0clEVNkl
- TLSH T1D6F59E1266C484F9E3920270DE89FAAC47ACBEB493FF58B7779118CD6921DC2712524F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3