General
- Target 2026-08-22_a180c0ed09d92dc44f157760d70294a7_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader
- Size 9.7MB
- Sample260823-d7cnfssdqa
- SHA256 fbfec92f0ff264d6233d9042ec0cb93f2bb266ca3cab54e8aaff7038d7213dcc
- MD5 a180c0ed09d92dc44f157760d70294a7
- SHA1 9d9487feeb24222a83806c3d9b32b0c6995f94af
- SHA512 210da88c37c85cc003a6c3a871e1048ed65356aa5c986d7a77b76a082380d0814a35072c7cf49d137b39b043f826ac823106d81ac7b330e7cc84c7042193b917
- SSDEEP 196608:NaZseskAFIQ8fGu0zkisj7Dks+Afv8xxKl08:Npes58fGuLzws+yvFC8
- TLSH T111A6E063B302C0B6D58201F1592A9BFE893CBD381B2154D3F3D47E6A69721D22636F5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a180c0ed09d92dc44f157760d70294a7_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-s.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a180c0ed09d92dc44f157760d70294a7_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader
- Size 9.7MB
- SHA256 fbfec92f0ff264d6233d9042ec0cb93f2bb266ca3cab54e8aaff7038d7213dcc
- MD5 a180c0ed09d92dc44f157760d70294a7
- SHA1 9d9487feeb24222a83806c3d9b32b0c6995f94af
- SHA512 210da88c37c85cc003a6c3a871e1048ed65356aa5c986d7a77b76a082380d0814a35072c7cf49d137b39b043f826ac823106d81ac7b330e7cc84c7042193b917
- SSDEEP 196608:NaZseskAFIQ8fGu0zkisj7Dks+Afv8xxKl08:Npes58fGuLzws+yvFC8
- TLSH T111A6E063B302C0B6D58201F1592A9BFE893CBD381B2154D3F3D47E6A69721D22636F5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1