General
- Target 2026-04-23_4153c659694aafd4f81518cffaba933c_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop
- Size 10.4MB
- Sample260423-1hpcaaas71
- SHA256 a9292165a6397967ecb2a55cf9c95e64b69b1f2a4278373742c3bf23c0841e56
- MD5 4153c659694aafd4f81518cffaba933c
- SHA1 ed624def4fb582d42c23268f879d9ac8b864c8d9
- SHA512 0bd67467c7986c4e63f4b9d7cb67b7bf11990da76457980f887cc70bc4d9d3a0a5f90c77eec2fdfd8f4d2ccfca81c7e948d4a76af06ded55091cbee4cfab79f5
- SSDEEP 98304:oMt7TpFwK2poBkx5uHTs1DsLHyM59kGudh1NxtHdYBgu6w:fgpAG5uHgOx9kGYhjfHy6w
- TLSH T1DDB65B07B2A2A174D5670B70102A912997F4BF0ECF1C8D9BB68FFC242B72679751B217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-23_4153c659694aafd4f81518cffaba933c_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_4153c659694aafd4f81518cffaba933c_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_4153c659694aafd4f81518cffaba933c_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop
- Size 10.4MB
- SHA256 a9292165a6397967ecb2a55cf9c95e64b69b1f2a4278373742c3bf23c0841e56
- MD5 4153c659694aafd4f81518cffaba933c
- SHA1 ed624def4fb582d42c23268f879d9ac8b864c8d9
- SHA512 0bd67467c7986c4e63f4b9d7cb67b7bf11990da76457980f887cc70bc4d9d3a0a5f90c77eec2fdfd8f4d2ccfca81c7e948d4a76af06ded55091cbee4cfab79f5
- SSDEEP 98304:oMt7TpFwK2poBkx5uHTs1DsLHyM59kGudh1NxtHdYBgu6w:fgpAG5uHgOx9kGYhjfHy6w
- TLSH T1DDB65B07B2A2A174D5670B70102A912997F4BF0ECF1C8D9BB68FFC242B72679751B217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents