General
- Target 2026-04-18_0c2d245ddd902dfd1c7b8f0e183b116b_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 32.9MB
- Sample260418-erc5qagt3w
- SHA256 3d7b6a7f037dc47b165cf7d470f74fdd46cc571aff6b3c81173a1751614d10bc
- MD5 0c2d245ddd902dfd1c7b8f0e183b116b
- SHA1 74affd0c9c2c7822b7212140b0fba846bdd41a27
- SHA512 4006a3dfb888dac7da766e3a2d908f69c2b7f72aa7e29de9e4834be64cff8d63a10577ffcdf7b806c6d9c56b0c947289b1cbb44657fd4f6136cbfba15dfe0931
- SSDEEP 786432:MTkBKCZgo+YWNAEV0kxSCaMUxHCm6hs7RBOC/o1HpY:EkJgdN902STHCmbCC/o1H
- TLSH T14F771222F242C437D0532A709C1BE3D57129BB255F385C8B7AE42F0C6F797867A391A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-18_0c2d245ddd902dfd1c7b8f0e183b116b_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_0c2d245ddd902dfd1c7b8f0e183b116b_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 32.9MB
- SHA256 3d7b6a7f037dc47b165cf7d470f74fdd46cc571aff6b3c81173a1751614d10bc
- MD5 0c2d245ddd902dfd1c7b8f0e183b116b
- SHA1 74affd0c9c2c7822b7212140b0fba846bdd41a27
- SHA512 4006a3dfb888dac7da766e3a2d908f69c2b7f72aa7e29de9e4834be64cff8d63a10577ffcdf7b806c6d9c56b0c947289b1cbb44657fd4f6136cbfba15dfe0931
- SSDEEP 786432:MTkBKCZgo+YWNAEV0kxSCaMUxHCm6hs7RBOC/o1HpY:EkJgdN902STHCmbCC/o1H
- TLSH T14F771222F242C437D0532A709C1BE3D57129BB255F385C8B7AE42F0C6F797867A391A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Detects executables containing URLs to raw contents of a Github gist