General
- Target 2026-10-26_5de8f6ba9e052e7f8730ec7b8d7ecd8a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn
- Size 7.9MB
- Sample261027-tt9zssft2m
- SHA256 ae687ff407d0581f7d90b2e0b97eedb7fe75d49f5c52b4e61c84ec7a4c7921a2
- MD5 5de8f6ba9e052e7f8730ec7b8d7ecd8a
- SHA1 94c393b42a29ddbd1cf19b9f81ad94a1493ed013
- SHA512 515728cb16fcca480b917275d7104bd4aebc8d5b6baec80576edeb5598ee6249ac98588117085e17533880bea6cb718d72b7757385883bc56aac68b46d2e245d
- SSDEEP 98304:vYi+Yu/C6hGfeZ1fezvepHFg0uaqrGtcKCd1xjqHjgam7WrVZhhHsQ+:vFuPx0zWZeraqatcKKvcVZHf+
- TLSH T1F086AE11FA00C039F8D202F687BD8BF9E97E9A24077560C753D46AAC9F715E23A35A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_5de8f6ba9e052e7f8730ec7b8d7ecd8a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_5de8f6ba9e052e7f8730ec7b8d7ecd8a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_5de8f6ba9e052e7f8730ec7b8d7ecd8a_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_swisyn
- Size 7.9MB
- SHA256 ae687ff407d0581f7d90b2e0b97eedb7fe75d49f5c52b4e61c84ec7a4c7921a2
- MD5 5de8f6ba9e052e7f8730ec7b8d7ecd8a
- SHA1 94c393b42a29ddbd1cf19b9f81ad94a1493ed013
- SHA512 515728cb16fcca480b917275d7104bd4aebc8d5b6baec80576edeb5598ee6249ac98588117085e17533880bea6cb718d72b7757385883bc56aac68b46d2e245d
- SSDEEP 98304:vYi+Yu/C6hGfeZ1fezvepHFg0uaqrGtcKCd1xjqHjgam7WrVZhhHsQ+:vFuPx0zWZeraqatcKKvcVZHf+
- TLSH T1F086AE11FA00C039F8D202F687BD8BF9E97E9A24077560C753D46AAC9F715E23A35A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2