General
- Target 2026-06-26_d65813d607b48f466baefeaa9344bdf0_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader
- Size 982KB
- Sample260629-n4nxeset3k
- SHA256 36ba3e46f0648c21949c61f85fa071e51b3f3ef0b53e06a972b976586ae9424f
- MD5 d65813d607b48f466baefeaa9344bdf0
- SHA1 8719c16b3dd3cbd685007d0a13a883a070185140
- SHA512 d326d1901bbff178fd4274b0329297d8cd0aef85db2dd874adf1d5fe25ad72595f393948ffe5014a7853b516baadd000adeba0a5469f69893dfbd43f67e4b8ca
- SSDEEP 12288:6PlfAwSfxL/2Dc3jDLLmt0LDQewsAjRu4Dw:CaaewsAjISw
- TLSH T1D2250623AE2C9432C1AF3D711E21DBD956287D108A133D82AEE47DCDEBB15C17A2D635
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d65813d607b48f466baefeaa9344bdf0_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d65813d607b48f466baefeaa9344bdf0_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d65813d607b48f466baefeaa9344bdf0_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader
- Size 982KB
- SHA256 36ba3e46f0648c21949c61f85fa071e51b3f3ef0b53e06a972b976586ae9424f
- MD5 d65813d607b48f466baefeaa9344bdf0
- SHA1 8719c16b3dd3cbd685007d0a13a883a070185140
- SHA512 d326d1901bbff178fd4274b0329297d8cd0aef85db2dd874adf1d5fe25ad72595f393948ffe5014a7853b516baadd000adeba0a5469f69893dfbd43f67e4b8ca
- SSDEEP 12288:6PlfAwSfxL/2Dc3jDLLmt0LDQewsAjRu4Dw:CaaewsAjISw
- TLSH T1D2250623AE2C9432C1AF3D711E21DBD956287D108A133D82AEE47DCDEBB15C17A2D635
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.