General
- Target 2026-09-04_27acc3043886ea3276bd465119afc6cd_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 14.6MB
- Sample260905-tfvb7axgnf
- SHA256 b796253b45425674b4aa4eb15de2ec0d0e84b2f111517f33d8c39b9ed947c383
- MD5 27acc3043886ea3276bd465119afc6cd
- SHA1 3e16bb37dff4a3188ec7a5412c9aabbf9808f8be
- SHA512 aa34c181a9ba95063ce631c3c78d1e6aa3425a7171d63805dc730945d729b1974b74728b67b72245e3407aa0ccd145cbeacffd75e78f1a59d7c53821fbd8a6d8
- SSDEEP 196608:UmTybz9OeIr56lQnKtcKtAijqmTikmjFWUPJc5+w1TsJzZ/QsegVTGSxm:Fe9Z2rKtJtAijJCWUPJc5+w1TlgVU
- TLSH T1F7F68D1273918827E17276F38865DA95282D3E610F6494C73AF83A0D9E397C3ED3265F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_27acc3043886ea3276bd465119afc6cd_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_27acc3043886ea3276bd465119afc6cd_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_27acc3043886ea3276bd465119afc6cd_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 14.6MB
- SHA256 b796253b45425674b4aa4eb15de2ec0d0e84b2f111517f33d8c39b9ed947c383
- MD5 27acc3043886ea3276bd465119afc6cd
- SHA1 3e16bb37dff4a3188ec7a5412c9aabbf9808f8be
- SHA512 aa34c181a9ba95063ce631c3c78d1e6aa3425a7171d63805dc730945d729b1974b74728b67b72245e3407aa0ccd145cbeacffd75e78f1a59d7c53821fbd8a6d8
- SSDEEP 196608:UmTybz9OeIr56lQnKtcKtAijqmTikmjFWUPJc5+w1TsJzZ/QsegVTGSxm:Fe9Z2rKtJtAijJCWUPJc5+w1TlgVU
- TLSH T1F7F68D1273918827E17276F38865DA95282D3E610F6494C73AF83A0D9E397C3ED3265F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.