General
- Target 2026-07-03_2d106301b5305e76992bf71dfe8cb1d8_amadey_darkgate_elex_glassworm
- Size 52.4MB
- Sample260704-a4fddshz2s
- SHA256 a0ceccd28bb390e878038580d7b18defbae96cf0984c5d3d19fd0b5df81fec9a
- MD5 2d106301b5305e76992bf71dfe8cb1d8
- SHA1 def8a220d8db4024b834470b1371fe78a189754a
- SHA512 3a21a668c6a8917f117485f154174acb5f9a4333e99c79d18300afb6c9803f1c7b1298e2474a95f61a29a4ef7f10373457f7a048f32d07f7903e4d6c433d4465
- SSDEEP 786432:4Pcf1qXcee3+gc5ibD52NVr8RfCRvxQK1xPDl1YZ3gQOWu:4Pcfscee32NVL+K1xShu
- TLSH T18FC7C012B3C88E36F99E067181BBE765C37DA9111775EBCB0A98F6D814723D149322E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_2d106301b5305e76992bf71dfe8cb1d8_amadey_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_2d106301b5305e76992bf71dfe8cb1d8_amadey_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_2d106301b5305e76992bf71dfe8cb1d8_amadey_darkgate_elex_glassworm
- Size 52.4MB
- SHA256 a0ceccd28bb390e878038580d7b18defbae96cf0984c5d3d19fd0b5df81fec9a
- MD5 2d106301b5305e76992bf71dfe8cb1d8
- SHA1 def8a220d8db4024b834470b1371fe78a189754a
- SHA512 3a21a668c6a8917f117485f154174acb5f9a4333e99c79d18300afb6c9803f1c7b1298e2474a95f61a29a4ef7f10373457f7a048f32d07f7903e4d6c433d4465
- SSDEEP 786432:4Pcf1qXcee3+gc5ibD52NVr8RfCRvxQK1xPDl1YZ3gQOWu:4Pcfscee32NVL+K1xShu
- TLSH T18FC7C012B3C88E36F99E067181BBE765C37DA9111775EBCB0A98F6D814723D149322E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.