General
- Target 2026-09-12_1772ad1d02b444c70283ad11636c171a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- Sample260913-gmvkbaff79
- SHA256 471b90cbda6ad9675679ef15a8a4bab4ad902e5429ffd7224ef6342c288624dc
- MD5 1772ad1d02b444c70283ad11636c171a
- SHA1 37360b63909ae93b41eda454810bea460470c139
- SHA512 27130efd8f5ad362748b622d99dac87ade68467ec2701320b742f5b332b2ff703819d514441b1f87e9e4628d7d0ca6abc8ce0665f5a4a424392cf04e93129530
- SSDEEP 49152:tu1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqu1ZOWXM:JnCG4h7FiRA7WkAbJ0rCmIZDjNJpe
- TLSH T115E59E21BDB14427C46303728D6EF67D316DBD741B3481C763CB3A5C29346E26A3A6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_1772ad1d02b444c70283ad11636c171a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_1772ad1d02b444c70283ad11636c171a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_1772ad1d02b444c70283ad11636c171a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- SHA256 471b90cbda6ad9675679ef15a8a4bab4ad902e5429ffd7224ef6342c288624dc
- MD5 1772ad1d02b444c70283ad11636c171a
- SHA1 37360b63909ae93b41eda454810bea460470c139
- SHA512 27130efd8f5ad362748b622d99dac87ade68467ec2701320b742f5b332b2ff703819d514441b1f87e9e4628d7d0ca6abc8ce0665f5a4a424392cf04e93129530
- SSDEEP 49152:tu1o1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqu1ZOWXM:JnCG4h7FiRA7WkAbJ0rCmIZDjNJpe
- TLSH T115E59E21BDB14427C46303728D6EF67D316DBD741B3481C763CB3A5C29346E26A3A6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory