2026-04-23_079ed6970b3bcd78007993d9a3bf5e6c_amadey_darkgate_elex_glassworm_rhadamanthys_stop_wannacry

General

Target
2026-04-23_079ed6970b3bcd78007993d9a3bf5e6c_amadey_darkgate_elex_glassworm_rhadamanthys_stop_wannacry
Size 2.7MB
Sample260423-qa82lset4s
SHA256 1daad23a659f5f3d8d44c8a2441049a7b02bb596b1a2a59e7a3c469ec8765394
MD5 079ed6970b3bcd78007993d9a3bf5e6c
SHA1 2a83f65cef3a7832feb75d1dc49ab0f9e46f35c3
SHA512 f8379f86196d4425d902a26fae55f329a43af76ee669b6383efd9d818b377ca48171ed3b48d3d8441f3b0e6b606c7ac88573a868666047e21702ca469eb166c7
SSDEEP 49152:BedCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnOoqJtb2I9Z/7yQPI7BCx:hK5N55sgjOk9WOooRucx
TLSH
T150D54812B6608BFEDC624035C9A6A774A6757C210B20F7CB628DB21D5E33ED19D37722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-23_079ed6970b3bcd78007993d9a3bf5e6c_amadey_darkgate_elex_glassworm_rhadamanthys_stop_wannacry

2026-04-23_079ed6970b3bcd78007993d9a3bf5e6c_amadey_darkgate_elex_glassworm_rhadamanthys_stop_wannacry

.exe 2.7MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 1daad23a659f5f3d8d44c8a2441049a7b02bb596b1a2a59e7a3c469ec8765394
MD5 079ed6970b3bcd78007993d9a3bf5e6c
SHA1 2a83f65cef3a7832feb75d1dc49ab0f9e46f35c3
SHA512 f8379f86196d4425d902a26fae55f329a43af76ee669b6383efd9d818b377ca48171ed3b48d3d8441f3b0e6b606c7ac88573a868666047e21702ca469eb166c7
SSDEEP 49152:BedCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnOoqJtb2I9Z/7yQPI7BCx:hK5N55sgjOk9WOooRucx
TLSH
T150D54812B6608BFEDC624035C9A6A774A6757C210B20F7CB628DB21D5E33ED19D37722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths