General
- Target 2026-07-04_7af565c4d1bbe233477565f932d53380_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 35.6MB
- Sample260704-mf7tyses2v
- SHA256 4a0afa4f7898fddaed12abde794da97dc437090dc5a8f6b39072c7989d965002
- MD5 7af565c4d1bbe233477565f932d53380
- SHA1 cc5af24afef5f0ea899a22b13e49be590efee243
- SHA512 7b9f9a384866ddb238d95bdceff885bb407577bda805af6b04f01f0f80bd48ec44d681db6fa5050986f8ba509fe374f1ebea08c9a9206f91f4e2fcb05ee3eaf1
- SSDEEP 786432:Z/DfHKhBkxXyO3xz38aeoF7fgxH1MjLan7kqPmn0ph:JMoFhARVyLWjPm0/
- TLSH T1D8872313B784753AF4271A395827E258683FF36576228C57ABF4088CCF7A5C02E3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-04_7af565c4d1bbe233477565f932d53380_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_7af565c4d1bbe233477565f932d53380_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_7af565c4d1bbe233477565f932d53380_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 35.6MB
- SHA256 4a0afa4f7898fddaed12abde794da97dc437090dc5a8f6b39072c7989d965002
- MD5 7af565c4d1bbe233477565f932d53380
- SHA1 cc5af24afef5f0ea899a22b13e49be590efee243
- SHA512 7b9f9a384866ddb238d95bdceff885bb407577bda805af6b04f01f0f80bd48ec44d681db6fa5050986f8ba509fe374f1ebea08c9a9206f91f4e2fcb05ee3eaf1
- SSDEEP 786432:Z/DfHKhBkxXyO3xz38aeoF7fgxH1MjLan7kqPmn0ph:JMoFhARVyLWjPm0/
- TLSH T1D8872313B784753AF4271A395827E258683FF36576228C57ABF4088CCF7A5C02E3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.