General
- Target 2026-09-08_04b4334d7cbc9709a7b95706e4f0eca4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 18.3MB
- Sample260910-jqjnbssydt
- SHA256 8d990c68cae90116da51a1b3024ad80029af87255f6b9abe94fd0be285d2313b
- MD5 04b4334d7cbc9709a7b95706e4f0eca4
- SHA1 8cecb356d9789b8eae07ece903ed4bc6ed2ce4a4
- SHA512 8cafe7e8d2a3b547974e92ade4ba6160c0f751af4a78bfb6fb50f15694e9a306b7dd33badd61183bec8cf879cc2d1a3a01dd88f7c78a35be5232cf853fc90c3d
- SSDEEP 49152:U+E7+ELO+E7+ELO+E7+ELO+E7+ELO+E7+ELM+E7+ELO+E7+ELO+E7+ELO+E7+ELi:iOU/jIEeQfoR/IuOFVjUu58
- TLSH T106179E06F9879076D57B40B00DDFC2BE8631BE6286118DEBF7CC8A1F5E32B906525726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_04b4334d7cbc9709a7b95706e4f0eca4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_04b4334d7cbc9709a7b95706e4f0eca4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_04b4334d7cbc9709a7b95706e4f0eca4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 18.3MB
- SHA256 8d990c68cae90116da51a1b3024ad80029af87255f6b9abe94fd0be285d2313b
- MD5 04b4334d7cbc9709a7b95706e4f0eca4
- SHA1 8cecb356d9789b8eae07ece903ed4bc6ed2ce4a4
- SHA512 8cafe7e8d2a3b547974e92ade4ba6160c0f751af4a78bfb6fb50f15694e9a306b7dd33badd61183bec8cf879cc2d1a3a01dd88f7c78a35be5232cf853fc90c3d
- SSDEEP 49152:U+E7+ELO+E7+ELO+E7+ELO+E7+ELO+E7+ELM+E7+ELO+E7+ELO+E7+ELO+E7+ELi:iOU/jIEeQfoR/IuOFVjUu58
- TLSH T106179E06F9879076D57B40B00DDFC2BE8631BE6286118DEBF7CC8A1F5E32B906525726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1