General
- Target 2026-09-03_f5701307739349674806502f1b851023_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
- Size 12.1MB
- Sample260905-y22evasbkc
- SHA256 df999aafec16fe606bbc08016f8cc3f948b47bd149dd2321a174f9edaa9dc7be
- MD5 f5701307739349674806502f1b851023
- SHA1 3e6d7439afb8b62e48c64dda2b44e4f4da5e649b
- SHA512 6f73b0c085a6daeac5f1cd23d7210b91303c84ac25a9516e56bc6c2ff123ead4884706dec42e0cbf355083a7dbeb54f3d10cef9f7ec1b84f31dbf9d74d8baeb5
- SSDEEP 196608:hkB1z9OeILXepWXxkmjFWWGdpTt0sAsEzW/6kZ/yAG:hkD9ZoupMWdpTt0Vkiz
- TLSH T1A1D69D327799C93BE1730A778D768A85182D7D204F7494CB3A883A0D9F357E12E3664B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_f5701307739349674806502f1b851023_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_f5701307739349674806502f1b851023_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_f5701307739349674806502f1b851023_amadey_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_smoke-loader
- Size 12.1MB
- SHA256 df999aafec16fe606bbc08016f8cc3f948b47bd149dd2321a174f9edaa9dc7be
- MD5 f5701307739349674806502f1b851023
- SHA1 3e6d7439afb8b62e48c64dda2b44e4f4da5e649b
- SHA512 6f73b0c085a6daeac5f1cd23d7210b91303c84ac25a9516e56bc6c2ff123ead4884706dec42e0cbf355083a7dbeb54f3d10cef9f7ec1b84f31dbf9d74d8baeb5
- SSDEEP 196608:hkB1z9OeILXepWXxkmjFWWGdpTt0sAsEzW/6kZ/yAG:hkD9ZoupMWdpTt0Vkiz
- TLSH T1A1D69D327799C93BE1730A778D768A85182D7D204F7494CB3A883A0D9F357E12E3664B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.