General
- Target 2026-05-07_0398b0bbddaf12ff048baf476a688e93_amadey_darkgate_elex_glassworm_mafia_remcos
- Size 11.2MB
- Sample260507-pmdwkady2v
- SHA256 2640ddc57b1c78c0461dc12c0c3385b415cfe5b9e59c7fc12c0b076354c0ab0a
- MD5 0398b0bbddaf12ff048baf476a688e93
- SHA1 87ac93f3c2c9fc376d6bdcb42ebe4859c4351591
- SHA512 11364ad86aeb6f2c2f4423aae6e5360abd4676d373384ad25a15028b676ec4c7382bfa381a5aa5f4e874daf22db9322411415431f6b0aba2296a2ec8a39287b8
- SSDEEP 196608:kzggSxqxdbwsq/am5o+E0tpHr7AYQezDE2/VJsv6tWKFdu9CP:GgyOb5U2/VJsv6tWKFdu9C
- TLSH T1FAC6BFD2E7C3C1F2D986313A2557E2279635AD0B432951E7B3D83F5AE4302E2793B249
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-07_0398b0bbddaf12ff048baf476a688e93_amadey_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_0398b0bbddaf12ff048baf476a688e93_amadey_darkgate_elex_glassworm_mafia_remcos
- Size 11.2MB
- SHA256 2640ddc57b1c78c0461dc12c0c3385b415cfe5b9e59c7fc12c0b076354c0ab0a
- MD5 0398b0bbddaf12ff048baf476a688e93
- SHA1 87ac93f3c2c9fc376d6bdcb42ebe4859c4351591
- SHA512 11364ad86aeb6f2c2f4423aae6e5360abd4676d373384ad25a15028b676ec4c7382bfa381a5aa5f4e874daf22db9322411415431f6b0aba2296a2ec8a39287b8
- SSDEEP 196608:kzggSxqxdbwsq/am5o+E0tpHr7AYQezDE2/VJsv6tWKFdu9CP:GgyOb5U2/VJsv6tWKFdu9C
- TLSH T1FAC6BFD2E7C3C1F2D986313A2557E2279635AD0B432951E7B3D83F5AE4302E2793B249
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.