General
- Target 2026-08-30_f08d8e032fdac5b37c7147d463cc7810_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.1MB
- Sample260831-3yavyaaf68
- SHA256 ff8807cfc00a4d1cdcc47f66a8b30d5786345f8b698582e172c22df7f228bb00
- MD5 f08d8e032fdac5b37c7147d463cc7810
- SHA1 fbad9a68d259bfc257f35731a9440b9cb11fd33b
- SHA512 7c7f1940d048991f64e686be7af6f626f3b4ecfa134ef3cf8aeeb67b347f16843fb752c3b82c723b1e137b8f3272170806b642539b25bdff3460e2d546d485cd
- SSDEEP 49152:U+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eodqatglr+ES+Eojf:YYYYYYYYpOU/jIEeQfoR/IuOFVjUu5T
- TLSH T1D1177E06F98380B1D87B01700CCBD3BF8A71BE258A128EABF74DD75F7A32B915924655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f08d8e032fdac5b37c7147d463cc7810_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_f08d8e032fdac5b37c7147d463cc7810_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f08d8e032fdac5b37c7147d463cc7810_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 18.1MB
- SHA256 ff8807cfc00a4d1cdcc47f66a8b30d5786345f8b698582e172c22df7f228bb00
- MD5 f08d8e032fdac5b37c7147d463cc7810
- SHA1 fbad9a68d259bfc257f35731a9440b9cb11fd33b
- SHA512 7c7f1940d048991f64e686be7af6f626f3b4ecfa134ef3cf8aeeb67b347f16843fb752c3b82c723b1e137b8f3272170806b642539b25bdff3460e2d546d485cd
- SSDEEP 49152:U+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eoj+ES+Eodqatglr+ES+Eojf:YYYYYYYYpOU/jIEeQfoR/IuOFVjUu5T
- TLSH T1D1177E06F98380B1D87B01700CCBD3BF8A71BE258A128EABF74DD75F7A32B915924655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1