General
- Target 2026-08-24_21a6ce1727c3378b5c69625eebe1a432_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 12.6MB
- Sample260825-vxr4tsab56
- SHA256 566d244b6fff66ff20aba51c938b7edcfae1ae74107ec0f5160eabf4eebc924e
- MD5 21a6ce1727c3378b5c69625eebe1a432
- SHA1 3068fdb7859c979926cbc354a59110aa708ad909
- SHA512 98c9f1773517516fbcb9e84728b282c5b175e45eecb9f5c9387942d67fe63d277019bde50986b55cb8b522f8f1dc39edbcd0b53310fcea615eacdbf07642541a
- SSDEEP 196608:dbz9OeIIWomkmjFW04y1YbCHhTjUwkwn0Z/kseIMSsZ:V9Z30W0/1YboJDkC1
- TLSH T143D69E2273918827E5770A338C76DA95283D79600F7495DB3BC81E0D9E39BC1AE3275B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_21a6ce1727c3378b5c69625eebe1a432_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_21a6ce1727c3378b5c69625eebe1a432_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_21a6ce1727c3378b5c69625eebe1a432_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 12.6MB
- SHA256 566d244b6fff66ff20aba51c938b7edcfae1ae74107ec0f5160eabf4eebc924e
- MD5 21a6ce1727c3378b5c69625eebe1a432
- SHA1 3068fdb7859c979926cbc354a59110aa708ad909
- SHA512 98c9f1773517516fbcb9e84728b282c5b175e45eecb9f5c9387942d67fe63d277019bde50986b55cb8b522f8f1dc39edbcd0b53310fcea615eacdbf07642541a
- SSDEEP 196608:dbz9OeIIWomkmjFW04y1YbCHhTjUwkwn0Z/kseIMSsZ:V9Z30W0/1YboJDkC1
- TLSH T143D69E2273918827E5770A338C76DA95283D79600F7495DB3BC81E0D9E39BC1AE3275B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.