2026-04-22_07e3bb621d4afa886fc6e7024b046ee7_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar

General

Target
2026-04-22_07e3bb621d4afa886fc6e7024b046ee7_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar
Size 3.0MB
Sample260422-raznlscs21
SHA256 8f7f5e8f2c51a1ceeed01d0ea9ce6f86545802dc8a342b88cf27a92b4e5f425d
MD5 07e3bb621d4afa886fc6e7024b046ee7
SHA1 aad46be0068c2e358c704d001bec49181a160332
SHA512 2558f9ab7efbca6983f24fafc452d75073ce0ab1f6a58eb15a04809f72750f6b5ba1a2ed5bafa4a0590c8bf0863a8ad2f9ff61502e0a479f6abd6b9a1f0754d1
SSDEEP 49152:BdCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnO1Pji0Ajny6i1zuajsauZnJG:WK5N55sgjOk9WOljort2
TLSH
T1FEE58D16B7A486F9D8738035CAA59365E67178211B30E7CB2298E33C5F33AD19D37B21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-22_07e3bb621d4afa886fc6e7024b046ee7_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar

2026-04-22_07e3bb621d4afa886fc6e7024b046ee7_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar

.exe 3.0MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 8f7f5e8f2c51a1ceeed01d0ea9ce6f86545802dc8a342b88cf27a92b4e5f425d
MD5 07e3bb621d4afa886fc6e7024b046ee7
SHA1 aad46be0068c2e358c704d001bec49181a160332
SHA512 2558f9ab7efbca6983f24fafc452d75073ce0ab1f6a58eb15a04809f72750f6b5ba1a2ed5bafa4a0590c8bf0863a8ad2f9ff61502e0a479f6abd6b9a1f0754d1
SSDEEP 49152:BdCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnO1Pji0Ajny6i1zuajsauZnJG:WK5N55sgjOk9WOljort2
TLSH
T1FEE58D16B7A486F9D8738035CAA59365E67178211B30E7CB2298E33C5F33AD19D37B21
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths