General
- Target 2026-06-27_08d5c54642ffaef7225fe7e6240ab722_amadey_darkgate_elex_emotet_glassworm_remcos_smoke-loader_zxxz
- Size 10.2MB
- Sample260629-mdbczacx9m
- SHA256 4ab90c9ead6ba16f21e9e30faf62875bd8d8b1cf28be8e1da1150fff269594d3
- MD5 08d5c54642ffaef7225fe7e6240ab722
- SHA1 6b8198c7ab90d30829fb95309164efe62b89b5e9
- SHA512 82746088b6344f8f1540757e72b2233e45c891d8660e358f79ed39b4cd342afa6e59429015f33c7406b3a5ae8c255dbaef49b9364ae1bfe78f9865c6c165b594
- SSDEEP 196608:ss4U4DS0HT1XDlV/9uem4lxAA347n+1HxrbwRJVS:TH0z1ldM4omrqi
- TLSH T11EB69D82B801C97BF02B09B9353D02A04A217E594BA44F97FFDCBD672FB256257ED118
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_08d5c54642ffaef7225fe7e6240ab722_amadey_darkgate_elex_emotet_glassworm_remcos_smoke-loader_zxxz.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_08d5c54642ffaef7225fe7e6240ab722_amadey_darkgate_elex_emotet_glassworm_remcos_smoke-loader_zxxz
- Size 10.2MB
- SHA256 4ab90c9ead6ba16f21e9e30faf62875bd8d8b1cf28be8e1da1150fff269594d3
- MD5 08d5c54642ffaef7225fe7e6240ab722
- SHA1 6b8198c7ab90d30829fb95309164efe62b89b5e9
- SHA512 82746088b6344f8f1540757e72b2233e45c891d8660e358f79ed39b4cd342afa6e59429015f33c7406b3a5ae8c255dbaef49b9364ae1bfe78f9865c6c165b594
- SSDEEP 196608:ss4U4DS0HT1XDlV/9uem4lxAA347n+1HxrbwRJVS:TH0z1ldM4omrqi
- TLSH T11EB69D82B801C97BF02B09B9353D02A04A217E594BA44F97FFDCBD672FB256257ED118
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)