General
- Target 2026-08-14_27ada21b9271d1c0c99f4a2feb1bf554_amadey_darkgate_elex_luca-stealer_mespinoza_njrat_remcos_rhadamanthys_smoke-loader
- Size 743KB
- Sample260815-c29wbsdp2s
- SHA256 2e5a9b24855ecc30765cc33001d7dc63e1be173c033a25844f6093274768995d
- MD5 27ada21b9271d1c0c99f4a2feb1bf554
- SHA1 cfffd0880b358c64035a93fa92769123be60f1d1
- SHA512 80cded0d218106c32a2d85ee7113537c6ac6519dbac5be1cecab39dc8a9a5b53e81bae3b6078247b6d45f49981304ed4be0e5b3058e7d400c4d7f6cb7aceef56
- SSDEEP 12288:JjwLvIfOKZrcyeYT0RpnqpCLejjLujx4o+He4jwyW0xPIfxQWmtUSirGEZxf4b5:JYvIfDIykLeSywyrIfxQWkUSiTZMA
- TLSH T1B6F49D32BA41C036E1F2013595BDAB76587EB531072944DBE3E80A7D2EB01D1BE3AB57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_27ada21b9271d1c0c99f4a2feb1bf554_amadey_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_27ada21b9271d1c0c99f4a2feb1bf554_amadey_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_27ada21b9271d1c0c99f4a2feb1bf554_amadey_darkgate_elex_luca-stealer_mespinoza_njrat_remcos_rhadamanthys_smoke-loader
- Size 743KB
- SHA256 2e5a9b24855ecc30765cc33001d7dc63e1be173c033a25844f6093274768995d
- MD5 27ada21b9271d1c0c99f4a2feb1bf554
- SHA1 cfffd0880b358c64035a93fa92769123be60f1d1
- SHA512 80cded0d218106c32a2d85ee7113537c6ac6519dbac5be1cecab39dc8a9a5b53e81bae3b6078247b6d45f49981304ed4be0e5b3058e7d400c4d7f6cb7aceef56
- SSDEEP 12288:JjwLvIfOKZrcyeYT0RpnqpCLejjLujx4o+He4jwyW0xPIfxQWmtUSirGEZxf4b5:JYvIfDIykLeSywyrIfxQWkUSiTZMA
- TLSH T1B6F49D32BA41C036E1F2013595BDAB76587EB531072944DBE3E80A7D2EB01D1BE3AB57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon