General
- Target 2026-09-08_7b3ecdccc65738283093cd3ba53c1c0e_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- Sample260910-fbffkszzcz
- SHA256 ec1376b4ad66b8bf0a9b015d1eb20a5dc3c7a777e48bf22064f8430f8e7d9c0b
- MD5 7b3ecdccc65738283093cd3ba53c1c0e
- SHA1 f2a8bf4033c7d3cc3951a54b096c680dd552fba0
- SHA512 bbd610dd9bfc1d76ffc23e60fab543f2a8c766c8807e7417f19665820a62487f813c6bb976a86066ec9243a7bed0e1990060e000b5dfcf1910f6d3e3ce34de5b
- SSDEEP 49152:MJ0kHCMIX0z96GhH9hi3ZFfDuYkjsl82ot4+Ej2Ez+lneVqGhiw52LlOpbeZB7m:hAYkjsl82ot4+Ej2Ez+lneVq8ycv
- TLSH T107A5CF60B9458427CCD162F29B5C7766445CE8A4473598C7E3C81EDFA3A43D2AE32CFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_7b3ecdccc65738283093cd3ba53c1c0e_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_7b3ecdccc65738283093cd3ba53c1c0e_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- SHA256 ec1376b4ad66b8bf0a9b015d1eb20a5dc3c7a777e48bf22064f8430f8e7d9c0b
- MD5 7b3ecdccc65738283093cd3ba53c1c0e
- SHA1 f2a8bf4033c7d3cc3951a54b096c680dd552fba0
- SHA512 bbd610dd9bfc1d76ffc23e60fab543f2a8c766c8807e7417f19665820a62487f813c6bb976a86066ec9243a7bed0e1990060e000b5dfcf1910f6d3e3ce34de5b
- SSDEEP 49152:MJ0kHCMIX0z96GhH9hi3ZFfDuYkjsl82ot4+Ej2Ez+lneVqGhiw52LlOpbeZB7m:hAYkjsl82ot4+Ej2Ez+lneVq8ycv
- TLSH T107A5CF60B9458427CCD162F29B5C7766445CE8A4473598C7E3C81EDFA3A43D2AE32CFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1