General
- Target 2026-08-24_770365664c7f514fbd6e193091e8f61c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 2.4MB
- Sample260825-l6d4wsgf83
- SHA256 16facfc18100ff5dea2a9da54cea73ed2c7165ea354e1e29f03cfa9cb2a077a5
- MD5 770365664c7f514fbd6e193091e8f61c
- SHA1 4a2613d873e090cc7be6cbb5aed105ea0d8a6b78
- SHA512 128b0cd0b6fcde7a52dc171b780852ac7f36b73e5a192c841e6763336451fbabf19f9cd6375613cecfcc605e974ac9faaf401c6a64be9bf9d49958fdf9dce93d
- SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjgpTivWhLxWDpvjsT+I2fXpU:njBxcO4EYljM1yjvCLxwpPG
- TLSH T135C5AE02B6C080B2E4B3117185BA67764639FC604B3196CF6388FA6D6F717C16E397A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_770365664c7f514fbd6e193091e8f61c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_770365664c7f514fbd6e193091e8f61c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_770365664c7f514fbd6e193091e8f61c_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 2.4MB
- SHA256 16facfc18100ff5dea2a9da54cea73ed2c7165ea354e1e29f03cfa9cb2a077a5
- MD5 770365664c7f514fbd6e193091e8f61c
- SHA1 4a2613d873e090cc7be6cbb5aed105ea0d8a6b78
- SHA512 128b0cd0b6fcde7a52dc171b780852ac7f36b73e5a192c841e6763336451fbabf19f9cd6375613cecfcc605e974ac9faaf401c6a64be9bf9d49958fdf9dce93d
- SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjgpTivWhLxWDpvjsT+I2fXpU:njBxcO4EYljM1yjvCLxwpPG
- TLSH T135C5AE02B6C080B2E4B3117185BA67764639FC604B3196CF6388FA6D6F717C16E397A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory