General
- Target 2026-06-28_f6b2f7d2a39776306c5efa48a1891064_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 715KB
- Sample260628-wgqrhaa12k
- SHA256 d39409fa6cef6c048dfbd30f51da629e9db236f833d3b0d18a81251d56dac1ce
- MD5 f6b2f7d2a39776306c5efa48a1891064
- SHA1 b9995b10e5f26de7c65f4339b576b937901d57ec
- SHA512 8d658bb33aa8e622c06f0ed1664f2bc67d6d079f0781030acf3360fa7101d211cc1d3a681dbdaae00ee7fe3bf7184b20224a50d4afc3afe2a85113985848c566
- SSDEEP 12288:lkmAqNhBrYvg6QiEDCyxDdy0+BRXjIjbD9wJdy+:lN5Bv6QiEjJy0wRiWy+
- TLSH T1CBF47D2237E4E031E2724B346F6BD26556B5BC319870894FB7D43B3D2F706C29A25B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_f6b2f7d2a39776306c5efa48a1891064_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_f6b2f7d2a39776306c5efa48a1891064_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f6b2f7d2a39776306c5efa48a1891064_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 715KB
- SHA256 d39409fa6cef6c048dfbd30f51da629e9db236f833d3b0d18a81251d56dac1ce
- MD5 f6b2f7d2a39776306c5efa48a1891064
- SHA1 b9995b10e5f26de7c65f4339b576b937901d57ec
- SHA512 8d658bb33aa8e622c06f0ed1664f2bc67d6d079f0781030acf3360fa7101d211cc1d3a681dbdaae00ee7fe3bf7184b20224a50d4afc3afe2a85113985848c566
- SSDEEP 12288:lkmAqNhBrYvg6QiEDCyxDdy0+BRXjIjbD9wJdy+:lN5Bv6QiEjJy0wRiWy+
- TLSH T1CBF47D2237E4E031E2724B346F6BD26556B5BC319870894FB7D43B3D2F706C29A25B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.