General
- Target 2026-09-04_a22b46caefdc1d05be9d9d5aaa991001_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 2.5MB
- Sample260905-b2sflsbc93
- SHA256 48c0194a918bc78ae1d10cb6bfcee7b03f58b90d556bb8104d7c5f66c566d9b0
- MD5 a22b46caefdc1d05be9d9d5aaa991001
- SHA1 4b3d1f407e17ef202a0c5f5a28002e20daaf1ae8
- SHA512 ca81b345ee87bd4c561b78046e4c74ee192fa2667f5edde2439b3a2953f6952ba8caa617e703fde1dcab7028d84b226ac9fdb6a6485252e3ad7ebc40a73d5023
- SSDEEP 49152:4fl5c696VOSnhb5Igxgd9Ee+CDFxyEL1Cph70hNOTRzlMoA:OltQV95I9aCfJL1ah70hNUlM
- TLSH T172C529E23980C0F2CD120E335949EAFDB1AC7D7F4A39B18762D0BB2D7D7119E85245A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_a22b46caefdc1d05be9d9d5aaa991001_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_a22b46caefdc1d05be9d9d5aaa991001_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_a22b46caefdc1d05be9d9d5aaa991001_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 2.5MB
- SHA256 48c0194a918bc78ae1d10cb6bfcee7b03f58b90d556bb8104d7c5f66c566d9b0
- MD5 a22b46caefdc1d05be9d9d5aaa991001
- SHA1 4b3d1f407e17ef202a0c5f5a28002e20daaf1ae8
- SHA512 ca81b345ee87bd4c561b78046e4c74ee192fa2667f5edde2439b3a2953f6952ba8caa617e703fde1dcab7028d84b226ac9fdb6a6485252e3ad7ebc40a73d5023
- SSDEEP 49152:4fl5c696VOSnhb5Igxgd9Ee+CDFxyEL1Cph70hNOTRzlMoA:OltQV95I9aCfJL1ah70hNUlM
- TLSH T172C529E23980C0F2CD120E335949EAFDB1AC7D7F4A39B18762D0BB2D7D7119E85245A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application