General
- Target 2026-05-05_3cd5ffecb9f739cbcd52fa1b7c72c007_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 32.9MB
- Sample260505-ppwt6ab14n
- SHA256 f26bcf7805f8d8a63b79b3aee830b7feafa51cb4386643348d99554cfcfd2ea2
- MD5 3cd5ffecb9f739cbcd52fa1b7c72c007
- SHA1 7d6e27b6d1dc7fdbb1c446e88b577097618fdd67
- SHA512 2fe3af094c0025269c3fe570e39e5c33bf19772dd3b539fc46d3ea984a4c79ea987093cd4dc27d2bf5a6f786de3a999049a1cc5db574f4b10ac89a6bf102b339
- SSDEEP 786432:S52+NF69yHCROsg5h4jS7USWlslp1hmHrrJMxOzgHg:SBFwyHCWA+Tb1hmHpM
- TLSH T12F771226F242C437D05329718C0BD2D9B436BB341F295C87BAE52F4C6FB9783762919A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-05_3cd5ffecb9f739cbcd52fa1b7c72c007_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_3cd5ffecb9f739cbcd52fa1b7c72c007_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 32.9MB
- SHA256 f26bcf7805f8d8a63b79b3aee830b7feafa51cb4386643348d99554cfcfd2ea2
- MD5 3cd5ffecb9f739cbcd52fa1b7c72c007
- SHA1 7d6e27b6d1dc7fdbb1c446e88b577097618fdd67
- SHA512 2fe3af094c0025269c3fe570e39e5c33bf19772dd3b539fc46d3ea984a4c79ea987093cd4dc27d2bf5a6f786de3a999049a1cc5db574f4b10ac89a6bf102b339
- SSDEEP 786432:S52+NF69yHCROsg5h4jS7USWlslp1hmHrrJMxOzgHg:SBFwyHCWA+Tb1hmHpM
- TLSH T12F771226F242C437D05329718C0BD2D9B436BB341F295C87BAE52F4C6FB9783762919A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Detects executables containing URLs to raw contents of a Github gist