General
- Target 2026-09-01_55bb20f8dcced2929986c0872cd35563_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 12.4MB
- Sample260903-n2xrjsstat
- SHA256 52d89d9007f0c4eca59d53ffa1254ca54803f6eeb9668223369deab61877f4dc
- MD5 55bb20f8dcced2929986c0872cd35563
- SHA1 87a25f081a6ed611dc1cd7ac15ff544bbd48982c
- SHA512 f790492d7039f892651f34640170246be6cbe25365f0997ac3fedaa82d306214d2afd9e6779d4b98fae17fa2d6a318099d13de4b0e4d2abacd357f7933676801
- SSDEEP 49152:U+ES+Epr+ESI+ES+Epr+ESI+ES+Epr+ESC+ES+Epr+ESI+ES+Epr+ESI+ES+EprU:oOU/jIEeQfoR/IuOFVjUu5m
- TLSH T140D67D06F98340B1E96B11B04DCBD3BF8A70BF25C6228DFBF78D871B6A32B915424655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_55bb20f8dcced2929986c0872cd35563_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_55bb20f8dcced2929986c0872cd35563_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_55bb20f8dcced2929986c0872cd35563_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 12.4MB
- SHA256 52d89d9007f0c4eca59d53ffa1254ca54803f6eeb9668223369deab61877f4dc
- MD5 55bb20f8dcced2929986c0872cd35563
- SHA1 87a25f081a6ed611dc1cd7ac15ff544bbd48982c
- SHA512 f790492d7039f892651f34640170246be6cbe25365f0997ac3fedaa82d306214d2afd9e6779d4b98fae17fa2d6a318099d13de4b0e4d2abacd357f7933676801
- SSDEEP 49152:U+ES+Epr+ESI+ES+Epr+ESI+ES+Epr+ESC+ES+Epr+ESI+ES+Epr+ESI+ES+EprU:oOU/jIEeQfoR/IuOFVjUu5m
- TLSH T140D67D06F98340B1E96B11B04DCBD3BF8A70BF25C6228DFBF78D871B6A32B915424655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1