General
- Target 2026-11-11_29fdceee7755ba481e6a8fe4e7784471_amadey_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_smoke-loader
- Size 3.6MB
- Sample261113-snretsw19q
- SHA256 6bb06ea454eee78259c62ae55bd7947eb13c511130eb61466eaa1d02065b21d2
- MD5 29fdceee7755ba481e6a8fe4e7784471
- SHA1 e4c10cad409152ae637a5e1997a7722c11ff0962
- SHA512 f485e495a8b3bf9c1a15cc9006a4c1e098c8cfb617a179f537e51acb89bec7154b9a22530c84ec5675d877172d6219d73c0a47c040756d9da34770e29988be0b
- SSDEEP 98304:HnCG4h7FiRA7WkAbJbrCmIZDjNJpl90yryoBeVw:Ho7RWkwamIZDjNJjH6V
- TLSH T1D106BF21BDB18527C46303328D6EF67D316DBD742B3481C763CB3A5C29386E15A3A6A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_29fdceee7755ba481e6a8fe4e7784471_amadey_darkgate_elex_glassworm_luca-stealer_magniber_mes.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_29fdceee7755ba481e6a8fe4e7784471_amadey_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_smoke-loader
- Size 3.6MB
- SHA256 6bb06ea454eee78259c62ae55bd7947eb13c511130eb61466eaa1d02065b21d2
- MD5 29fdceee7755ba481e6a8fe4e7784471
- SHA1 e4c10cad409152ae637a5e1997a7722c11ff0962
- SHA512 f485e495a8b3bf9c1a15cc9006a4c1e098c8cfb617a179f537e51acb89bec7154b9a22530c84ec5675d877172d6219d73c0a47c040756d9da34770e29988be0b
- SSDEEP 98304:HnCG4h7FiRA7WkAbJbrCmIZDjNJpl90yryoBeVw:Ho7RWkwamIZDjNJjH6V
- TLSH T1D106BF21BDB18527C46303328D6EF67D316DBD742B3481C763CB3A5C29386E15A3A6A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1