General
- Target 2026-11-12_52859eb247542548ad447be12091f7b8_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_wannacry
- Size 19.2MB
- Sample261113-dkngfae15w
- SHA256 30fbdd58406790adafb78c9b310887a073d0ab91addd13fcf1545dd1f8e607b9
- MD5 52859eb247542548ad447be12091f7b8
- SHA1 7ec7b296da71025d1596d966f14eaddaa9ba0169
- SHA512 3e7e7f3322c09d970faf5c720aa74681e05fba42334a569b7afea4952cc8e5a6f46e531196c0054a3cf3cc5ff12d77d72c1627b99f50be71aa7c73d77eff59a3
- SSDEEP 393216:YYwnBgDdiBfEScEW1oY4smJ62mWC08ohSw0:YqiBTcE8eEaZ
- TLSH T17D179D11E7D34171FAB31670997AA27A853FBE700971CC4FA28C9E4D6B739C1892172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_52859eb247542548ad447be12091f7b8_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_52859eb247542548ad447be12091f7b8_amadey_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_wannacry
- Size 19.2MB
- SHA256 30fbdd58406790adafb78c9b310887a073d0ab91addd13fcf1545dd1f8e607b9
- MD5 52859eb247542548ad447be12091f7b8
- SHA1 7ec7b296da71025d1596d966f14eaddaa9ba0169
- SHA512 3e7e7f3322c09d970faf5c720aa74681e05fba42334a569b7afea4952cc8e5a6f46e531196c0054a3cf3cc5ff12d77d72c1627b99f50be71aa7c73d77eff59a3
- SSDEEP 393216:YYwnBgDdiBfEScEW1oY4smJ62mWC08ohSw0:YqiBTcE8eEaZ
- TLSH T17D179D11E7D34171FAB31670997AA27A853FBE700971CC4FA28C9E4D6B739C1892172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.