General
- Target 2026-08-25_fbdf94eb93852b8d4983461960a6fc57_amadey_darkgate_elex_luca-stealer_magniber_njrat_smoke-loader
- Size 1.8MB
- Sample260826-atts2a1bnf
- SHA256 c61e5d6e5a9c7884f970c750f8d01d2e5d3219adbdb5a1b3459095a029d0836b
- MD5 fbdf94eb93852b8d4983461960a6fc57
- SHA1 66c82d4e6648872effe5f21c4f293eb804e6ecf3
- SHA512 52afea2da6334b596a7278bc521b721f8c96693f8de779d200619fb0eef9cfb3789305e65e63f6cb56126e54135a09860fb6c186f44c21bae402d2be8ebf4f90
- SSDEEP 49152:4R/ZkBt54kVFM9b3T027O45S40wLRuN2XhaqNSGFbNt:C/ZWQk402i4t62Xh1NSGd
- TLSH T19295A02175428231D461C2B44D29EBEDC37CA8B22B7265CF6FD46F6DAB205C26E35B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_fbdf94eb93852b8d4983461960a6fc57_amadey_darkgate_elex_luca-stealer_magniber_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_fbdf94eb93852b8d4983461960a6fc57_amadey_darkgate_elex_luca-stealer_magniber_njrat_smoke-loader
- Size 1.8MB
- SHA256 c61e5d6e5a9c7884f970c750f8d01d2e5d3219adbdb5a1b3459095a029d0836b
- MD5 fbdf94eb93852b8d4983461960a6fc57
- SHA1 66c82d4e6648872effe5f21c4f293eb804e6ecf3
- SHA512 52afea2da6334b596a7278bc521b721f8c96693f8de779d200619fb0eef9cfb3789305e65e63f6cb56126e54135a09860fb6c186f44c21bae402d2be8ebf4f90
- SSDEEP 49152:4R/ZkBt54kVFM9b3T027O45S40wLRuN2XhaqNSGFbNt:C/ZWQk402i4t62Xh1NSGd
- TLSH T19295A02175428231D461C2B44D29EBEDC37CA8B22B7265CF6FD46F6DAB205C26E35B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1