General
- Target 2026-08-24_02052307647f20134d2ecb2613399749_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample260825-y4fadsvxhs
- SHA256 c86c3c22311034d6e0c04141c32608f59dca3a1ae61c7dcc9cdbdd0e4fef3c65
- MD5 02052307647f20134d2ecb2613399749
- SHA1 a5b28c0e2bb6f29135737ede1079216cf8f03c62
- SHA512 5f4be0bb35fa4fdcef69ce613bc1c7921ddc22551ca1d41a39c0a8a0d3c0fc1d5dd5e5fdafde5c85d0dab4641e7ea0358846a278399b4f8c919fe6cad189285a
- SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjgpTivWhLxWDpvjsT+I2/wqo:njBxcO4EYljM1yjvCLxwpPm
- TLSH T134C5AE11B6E48873E0F3117195B4AA350939BD744338D2CF6398AA5E7E727C05E3A7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_02052307647f20134d2ecb2613399749_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_02052307647f20134d2ecb2613399749_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_02052307647f20134d2ecb2613399749_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 c86c3c22311034d6e0c04141c32608f59dca3a1ae61c7dcc9cdbdd0e4fef3c65
- MD5 02052307647f20134d2ecb2613399749
- SHA1 a5b28c0e2bb6f29135737ede1079216cf8f03c62
- SHA512 5f4be0bb35fa4fdcef69ce613bc1c7921ddc22551ca1d41a39c0a8a0d3c0fc1d5dd5e5fdafde5c85d0dab4641e7ea0358846a278399b4f8c919fe6cad189285a
- SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjgpTivWhLxWDpvjsT+I2/wqo:njBxcO4EYljM1yjvCLxwpPm
- TLSH T134C5AE11B6E48873E0F3117195B4AA350939BD744338D2CF6398AA5E7E727C05E3A7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory