General
- Target 2026-04-15_f43c06b7a6f68e9f3162c056cd18494c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 33.0MB
- Sample260415-xehtjsa19t
- SHA256 96f9d0b03cf12290517043489f5c381d7db520ac5ed0db120b0c6b6325b8a977
- MD5 f43c06b7a6f68e9f3162c056cd18494c
- SHA1 27b8e1d0f80ab7d743199e91cf94b2d823d94c97
- SHA512 f1c1475fd64258fb2aa4422136a866eb9bac97287bc001376dfb2abb41e30ffa0ccf9c98db797173176ffc32dd0149ea2f921afbb9570bbfb78211072d43a0c6
- SSDEEP 786432:baWCw8zksXw/adsl8KdaD4L+17389NdDp4rzVGClb:+rw8YnrvQg+xq7+rX
- TLSH T143771266F242C037C0631A348D07D3E97536BB641F38589B7AA42F4C6F7A3977A29193
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_f43c06b7a6f68e9f3162c056cd18494c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_f43c06b7a6f68e9f3162c056cd18494c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 33.0MB
- SHA256 96f9d0b03cf12290517043489f5c381d7db520ac5ed0db120b0c6b6325b8a977
- MD5 f43c06b7a6f68e9f3162c056cd18494c
- SHA1 27b8e1d0f80ab7d743199e91cf94b2d823d94c97
- SHA512 f1c1475fd64258fb2aa4422136a866eb9bac97287bc001376dfb2abb41e30ffa0ccf9c98db797173176ffc32dd0149ea2f921afbb9570bbfb78211072d43a0c6
- SSDEEP 786432:baWCw8zksXw/adsl8KdaD4L+17389NdDp4rzVGClb:+rw8YnrvQg+xq7+rX
- TLSH T143771266F242C037C0631A348D07D3E97536BB641F38589B7AA42F4C6F7A3977A29193
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Detects executables containing URLs to raw contents of a Github gist