General
- Target 2026-07-05_ca7e15ff251cecd74ff9b898eb815a93_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260705-bh7fesbw2m
- SHA256 7bfb1a8dafa450a44e11900d4e07da40388d558f6e27c28bcfddd88dac13e2ce
- MD5 ca7e15ff251cecd74ff9b898eb815a93
- SHA1 f7e9a52902fbdf38a1185e9859ffbc7afacffd52
- SHA512 2a8d4f0a68c06e710d6578d8da3d01a361c46126b52582709ba9f67a28f5466cc7ff0c83239175ab775fc3ad79b2f6d9393a5dafe35c56307e6db9ceda3cbfcd
- SSDEEP 12288:O3wSfxL/2Dc3bDLLmt0LDQewsAj+Q9FizThreXYJ2ggrIAUr62fVxVZvlYExJ/2y:cmewsAjfOrS+2fItbNbDJ+sXGjXr6
- TLSH T1AD15E030FE75D436C67F0DB61B36D706286DBA600F5119C3E3A88E9D5A302D22776A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_ca7e15ff251cecd74ff9b898eb815a93_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_ca7e15ff251cecd74ff9b898eb815a93_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 7bfb1a8dafa450a44e11900d4e07da40388d558f6e27c28bcfddd88dac13e2ce
- MD5 ca7e15ff251cecd74ff9b898eb815a93
- SHA1 f7e9a52902fbdf38a1185e9859ffbc7afacffd52
- SHA512 2a8d4f0a68c06e710d6578d8da3d01a361c46126b52582709ba9f67a28f5466cc7ff0c83239175ab775fc3ad79b2f6d9393a5dafe35c56307e6db9ceda3cbfcd
- SSDEEP 12288:O3wSfxL/2Dc3bDLLmt0LDQewsAj+Q9FizThreXYJ2ggrIAUr62fVxVZvlYExJ/2y:cmewsAjfOrS+2fItbNbDJ+sXGjXr6
- TLSH T1AD15E030FE75D436C67F0DB61B36D706286DBA600F5119C3E3A88E9D5A302D22776A27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1