General
- Target 2026-06-28_615d84ae8ce115352675ba396da8560a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_tofsee
- Size 2.5MB
- Sample260628-14wcqafs2w
- SHA256 3c48029c8c755a542b8c21f55f9ec10f5a72b01e6bc0788ccd40f01c420d7854
- MD5 615d84ae8ce115352675ba396da8560a
- SHA1 0c311a77e23e9a64862a3de0e6a83c1ed7d6357e
- SHA512 9aa573a6b4b6d4dff8582cb9d81403482ed2882534e274a160e7120676a893e195393452cc9cc00de509295db4f7652400a4f8f201fd06c78d2e48e14be8f82b
- SSDEEP 49152:xVSZ1hYOy6D0K2x0iH/pssJTR+eB2Ipoc3ILW0Oz:2BF0ryiH/pssJTR3bNUWP
- TLSH T12DC5AE03F692C0B2D256167651FB633A7F38DA200A71CB53E7E0EE756C72A515A1B30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_615d84ae8ce115352675ba396da8560a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_615d84ae8ce115352675ba396da8560a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_615d84ae8ce115352675ba396da8560a_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_tofsee
- Size 2.5MB
- SHA256 3c48029c8c755a542b8c21f55f9ec10f5a72b01e6bc0788ccd40f01c420d7854
- MD5 615d84ae8ce115352675ba396da8560a
- SHA1 0c311a77e23e9a64862a3de0e6a83c1ed7d6357e
- SHA512 9aa573a6b4b6d4dff8582cb9d81403482ed2882534e274a160e7120676a893e195393452cc9cc00de509295db4f7652400a4f8f201fd06c78d2e48e14be8f82b
- SSDEEP 49152:xVSZ1hYOy6D0K2x0iH/pssJTR+eB2Ipoc3ILW0Oz:2BF0ryiH/pssJTR3bNUWP
- TLSH T12DC5AE03F692C0B2D256167651FB633A7F38DA200A71CB53E7E0EE756C72A515A1B30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.