General
- Target 2026-08-16_f3bb016da0cbbd11c00a797ed3728f57_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_metamorfo_njrat_smoke-loader
- Size 3.5MB
- Sample260817-anszjszemb
- SHA256 40e4084f563f8ef53188388021231b78d0696555fa2d9e9a351e09fd0b7d7937
- MD5 f3bb016da0cbbd11c00a797ed3728f57
- SHA1 f120602ec62c08697e0335a4c645770efa16d960
- SHA512 eead599c1351b1a90bfd3fad527b9359f7a73cab0a8f08e9122f976affeb39abdf848f62fad8fe048881006b21af417a538ff72308375cf753d5dfe6e67746d8
- SSDEEP 98304:qehEYSHVilASORPenmS1W0ozi30F/yiW7Vlki/:rGYSHVilYPmW0clEVlkY
- TLSH T1CAF59E1266C484F9E3920270DE89FAAC46ECBEB493FF58B777A118CD5921DC2712524F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_f3bb016da0cbbd11c00a797ed3728f57_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_f3bb016da0cbbd11c00a797ed3728f57_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_f3bb016da0cbbd11c00a797ed3728f57_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_metamorfo_njrat_smoke-loader
- Size 3.5MB
- SHA256 40e4084f563f8ef53188388021231b78d0696555fa2d9e9a351e09fd0b7d7937
- MD5 f3bb016da0cbbd11c00a797ed3728f57
- SHA1 f120602ec62c08697e0335a4c645770efa16d960
- SHA512 eead599c1351b1a90bfd3fad527b9359f7a73cab0a8f08e9122f976affeb39abdf848f62fad8fe048881006b21af417a538ff72308375cf753d5dfe6e67746d8
- SSDEEP 98304:qehEYSHVilASORPenmS1W0ozi30F/yiW7Vlki/:rGYSHVilYPmW0clEVlkY
- TLSH T1CAF59E1266C484F9E3920270DE89FAAC46ECBEB493FF58B777A118CD5921DC2712524F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3