2026-06-05_14e08e6702f1124c6f45cb650bb3fa23_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_stop_vidar

General

Target
2026-06-05_14e08e6702f1124c6f45cb650bb3fa23_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_stop_vidar
Size 2.0MB
Sample260605-nt7xjsd151
SHA256 9a519df042c70afaa96e914b3e16e095b7d5f2f1de5d0b56068256bb2d08e502
MD5 14e08e6702f1124c6f45cb650bb3fa23
SHA1 98186c08e3c7419783a1344f7cfbe6c8e81c44bf
SHA512 ca6e4304235fe6cb9a31f22b2295a9ad5c2fa4d596bbbbab6a77ab7191b77fd9842b4f790cbcbe72e757c0a84ff759192ed4983c25adf0d4f0de629199b92dca
SSDEEP 49152:WwDIC+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87M:7+RYNAKvkTgXuquveY+W2o8oT3ezMrlW
TLSH
T13AA58C02ABE48472E6B72D3168BAB7251B3ABD501E31C78F5354799C4E33B80E93571B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-05_14e08e6702f1124c6f45cb650bb3fa23_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_stop_vidar

File Explorer

2026-06-05_14e08e6702f1124c6f45cb650bb3fa23_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_stop_vidar

.exe 2.0MB

2026-06-05_14e08e6702f1124c6f45cb650bb3fa23_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_stop_vidar

IMPHASH 509f053b11060f407af44d28c657481e
SHA256 9a519df042c70afaa96e914b3e16e095b7d5f2f1de5d0b56068256bb2d08e502
MD5 14e08e6702f1124c6f45cb650bb3fa23
SHA1 98186c08e3c7419783a1344f7cfbe6c8e81c44bf
SHA512 ca6e4304235fe6cb9a31f22b2295a9ad5c2fa4d596bbbbab6a77ab7191b77fd9842b4f790cbcbe72e757c0a84ff759192ed4983c25adf0d4f0de629199b92dca
SSDEEP 49152:WwDIC+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87M:7+RYNAKvkTgXuquveY+W2o8oT3ezMrlW
TLSH
T13AA58C02ABE48472E6B72D3168BAB7251B3ABD501E31C78F5354799C4E33B80E93571B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

45590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\dom\plugins\ipc\hangui\plugin-hang-ui.pdb

kernel32

VirtualQuery FreeLibrary WaitForSingleObject SetEvent WaitForSingleObjectEx GetModuleHandleW LoadLibraryW GetProcAddress QueueUserAPC OpenThread RegisterWaitForSingleObject IsDebuggerPresent GetCurrentThreadId CloseHandle UnregisterWaitEx UnmapViewOfFile FlushFileBuffers WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP OutputDebugStringW LoadLibraryExW HeapReAlloc GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId CreateFileW MapViewOfFile WideCharToMultiByte MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection IsProcessorFeaturePresent GetLastError HeapFree GetCommandLineW GetCPInfo RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW GetProcessHeap HeapSize GetStdHandle GetFileType GetModuleFileNameW WriteFile QueryPerformanceCounter

user32

ScreenToClient GetWindowRect LoadImageW PostMessageW SetForegroundWindow DialogBoxParamW GetDlgItem SetWindowLongW EndDialog SendDlgItemMessageW DeferWindowPos BeginDeferWindowPos SetDlgItemTextW SendMessageW EnableWindow SetWindowTextW EndDeferWindowPos

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-05_14e08e6702f1124c6f45cb650bb3fa23_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_stop_vidar

kernel32

user32

comctl32

generic