General
- Target 2026-09-04_6719300b9f91807561d6c3ae55b791d6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 17.3MB
- Sample260905-kd568szhmd
- SHA256 ee907455cecdbdab5c1f6ac115975b029916259ad6e418d082e149c342337443
- MD5 6719300b9f91807561d6c3ae55b791d6
- SHA1 869a12c7768d10c5213251d297acfe73c37cd223
- SHA512 a6d0914e17ec9f379fbb659fd11140add7d1800c66d677e75cd56ba6cea3f5bbbf3e82fd00b9dd56cb9c3bde2fa745b0cf599e3b3adb160aca71399f98e85f41
- SSDEEP 196608:qamPsWEP2eLxQKqwqdSZk2vzf5RrJPNZ/cemnV618fd8Vr:qEP9LxawqQk2LfBKA7
- TLSH T100074A1263D88416E1B21E339C79DAD568297A301F78C4DB7B8C1B8C9E39BC1AE31757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6719300b9f91807561d6c3ae55b791d6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6719300b9f91807561d6c3ae55b791d6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6719300b9f91807561d6c3ae55b791d6_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 17.3MB
- SHA256 ee907455cecdbdab5c1f6ac115975b029916259ad6e418d082e149c342337443
- MD5 6719300b9f91807561d6c3ae55b791d6
- SHA1 869a12c7768d10c5213251d297acfe73c37cd223
- SHA512 a6d0914e17ec9f379fbb659fd11140add7d1800c66d677e75cd56ba6cea3f5bbbf3e82fd00b9dd56cb9c3bde2fa745b0cf599e3b3adb160aca71399f98e85f41
- SSDEEP 196608:qamPsWEP2eLxQKqwqdSZk2vzf5RrJPNZ/cemnV618fd8Vr:qEP9LxawqQk2LfBKA7
- TLSH T100074A1263D88416E1B21E339C79DAD568297A301F78C4DB7B8C1B8C9E39BC1AE31757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.