General
- Target 2026-10-22_8d9621da618b193a31e3a16c2bd540f4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
- Size 7.8MB
- Sample261024-fw2jjsfy91
- SHA256 9a9303f5c7419141aed0fe7567e7c5943aef5b1c5c34b09832feb9b2a2ee1781
- MD5 8d9621da618b193a31e3a16c2bd540f4
- SHA1 926376ab9c7815939c1458c21f450f9ffa3276d7
- SHA512 4582ccb44a7211582a37b41882d7a38266bd3c75ae4e77ac6449eaf7469306b3d2f7783aaca8e770c4e5c9dd1c559c4884b3ce14dd4a7ef3337c6ad29e71fda0
- SSDEEP 98304:7eRLZpNct/Ujn6LdxYkPXo+GOKkT3JkLoEL78woli84Aqxa+1Zh3DLLAlxZUIB07:sZpNctMj6LdxYf63JXKod49ZnLkUww
- TLSH T103867C20E601E02BF8E200B1D66D57FE5558AF30035914DBB3CC7E9E6BB56D1BA32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_8d9621da618b193a31e3a16c2bd540f4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_8d9621da618b193a31e3a16c2bd540f4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_8d9621da618b193a31e3a16c2bd540f4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
- Size 7.8MB
- SHA256 9a9303f5c7419141aed0fe7567e7c5943aef5b1c5c34b09832feb9b2a2ee1781
- MD5 8d9621da618b193a31e3a16c2bd540f4
- SHA1 926376ab9c7815939c1458c21f450f9ffa3276d7
- SHA512 4582ccb44a7211582a37b41882d7a38266bd3c75ae4e77ac6449eaf7469306b3d2f7783aaca8e770c4e5c9dd1c559c4884b3ce14dd4a7ef3337c6ad29e71fda0
- SSDEEP 98304:7eRLZpNct/Ujn6LdxYkPXo+GOKkT3JkLoEL78woli84Aqxa+1Zh3DLLAlxZUIB07:sZpNctMj6LdxYf63JXKod49ZnLkUww
- TLSH T103867C20E601E02BF8E200B1D66D57FE5558AF30035914DBB3CC7E9E6BB56D1BA32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1