General
- Target 2026-05-28_d6449e0b30026aabe1c2a10cb7eeaf7a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 714KB
- Sample260528-sdhd6scs7m
- SHA256 f0f34f6771d521cef9f72b4f01c1672d018993393ad5f66010bd9b5dc224d534
- MD5 d6449e0b30026aabe1c2a10cb7eeaf7a
- SHA1 11d0f760143b0c47c4c4d2fb56d22d097e6619f5
- SHA512 d25d2a59e08f73ab6bb89c386be2e095e5a1871acfc2fc409577fc3b2bdabb517d45220367ea7c703de523c60c221e46b75784d47763462234960d169a929d00
- SSDEEP 12288:pUGH09S9x/7rp1DfVENRmjSJBRXjIj9kTcwv51:pUGHzn1DfVEwSnR1Tcq
- TLSH T116F46D2237E4E032E2724B346F5BD29556B6FC319870894FB7D43B3D2E706C29A25B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_d6449e0b30026aabe1c2a10cb7eeaf7a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_d6449e0b30026aabe1c2a10cb7eeaf7a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_d6449e0b30026aabe1c2a10cb7eeaf7a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 714KB
- SHA256 f0f34f6771d521cef9f72b4f01c1672d018993393ad5f66010bd9b5dc224d534
- MD5 d6449e0b30026aabe1c2a10cb7eeaf7a
- SHA1 11d0f760143b0c47c4c4d2fb56d22d097e6619f5
- SHA512 d25d2a59e08f73ab6bb89c386be2e095e5a1871acfc2fc409577fc3b2bdabb517d45220367ea7c703de523c60c221e46b75784d47763462234960d169a929d00
- SSDEEP 12288:pUGH09S9x/7rp1DfVENRmjSJBRXjIj9kTcwv51:pUGHzn1DfVEwSnR1Tcq
- TLSH T116F46D2237E4E032E2724B346F5BD29556B6FC319870894FB7D43B3D2E706C29A25B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.