General
- Target 2026-05-19_2a71543c3851bfb57538b62893d283b6_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_manuscrypt_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- Sample260519-nlhyfsey8l
- SHA256 85ce7beebb342059570a52d5441e3567f2819f6a26334267da48b31dc9daa791
- MD5 2a71543c3851bfb57538b62893d283b6
- SHA1 7d9a9fc3454e046ffcc5706c9c723b67f407a4bc
- SHA512 bec369211ef97b820e5f8fd1b79cac9db47612a4b8b919e38cad058611a8fb09f609209d7f278e88386ef537b6ac6ae52a291ac8255496c329334071ed69a5aa
- SSDEEP 24576:wx/WnSyhbzvZOqU11nxzfadB3I2p0Le5ji0hmxNrMmzauU:IWSytLoqUVydB3IgPji0Ajn2l
- TLSH T133858B21FAA4C232D07384B2C9A5E76AED3974510B3049C7D3D8DB2D2E766D29737722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-19_2a71543c3851bfb57538b62893d283b6_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_manu.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-19_2a71543c3851bfb57538b62893d283b6_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_manu.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-19_2a71543c3851bfb57538b62893d283b6_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_manuscrypt_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- SHA256 85ce7beebb342059570a52d5441e3567f2819f6a26334267da48b31dc9daa791
- MD5 2a71543c3851bfb57538b62893d283b6
- SHA1 7d9a9fc3454e046ffcc5706c9c723b67f407a4bc
- SHA512 bec369211ef97b820e5f8fd1b79cac9db47612a4b8b919e38cad058611a8fb09f609209d7f278e88386ef537b6ac6ae52a291ac8255496c329334071ed69a5aa
- SSDEEP 24576:wx/WnSyhbzvZOqU11nxzfadB3I2p0Le5ji0hmxNrMmzauU:IWSytLoqUVydB3IgPji0Ajn2l
- TLSH T133858B21FAA4C232D07384B2C9A5E76AED3974510B3049C7D3D8DB2D2E766D29737722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.