General
- Target 2026-09-04_0df68cab7b50f5e2ca4f6ae68e70c53f_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
- Size 12.5MB
- Sample260905-w76weafd85
- SHA256 d0c0e894052c3c4e92d7d910b54a05c6f5a7285ad822efc2d34a99c7af164b75
- MD5 0df68cab7b50f5e2ca4f6ae68e70c53f
- SHA1 7dc4343e3ecaaf5e13639dda9fbcc9e15effaa87
- SHA512 20941d98be0f3843f269548ab29d824b62a7e9370ee20ffb80be17781b5ee504b3964ce21e10973ce55c39367604350a06f5cb73fffe30252cc0c9c0d836ace1
- SSDEEP 196608:E3bz9OeIA+J2HokmjFW9uBHHGIa+xPLZ/QseOVTh1Axz:k9Zd+oHEW98HGIa+oOVlg
- TLSH T176D68D227391882BE1770A378D76DA95282D79210F6495CB3BC82E4D9F39BC17E32717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0df68cab7b50f5e2ca4f6ae68e70c53f_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_0df68cab7b50f5e2ca4f6ae68e70c53f_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_0df68cab7b50f5e2ca4f6ae68e70c53f_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
- Size 12.5MB
- SHA256 d0c0e894052c3c4e92d7d910b54a05c6f5a7285ad822efc2d34a99c7af164b75
- MD5 0df68cab7b50f5e2ca4f6ae68e70c53f
- SHA1 7dc4343e3ecaaf5e13639dda9fbcc9e15effaa87
- SHA512 20941d98be0f3843f269548ab29d824b62a7e9370ee20ffb80be17781b5ee504b3964ce21e10973ce55c39367604350a06f5cb73fffe30252cc0c9c0d836ace1
- SSDEEP 196608:E3bz9OeIA+J2HokmjFW9uBHHGIa+xPLZ/QseOVTh1Axz:k9Zd+oHEW98HGIa+oOVlg
- TLSH T176D68D227391882BE1770A378D76DA95282D79210F6495CB3BC82E4D9F39BC17E32717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.