General
- Target 2026-07-05_b8bd658496a7de658fa9755d7e23eb41_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260705-blv7kafz2w
- SHA256 28554ef5e9108778701a5a2e9489c32e6b3743ac751c02a77f8a2bab0677d200
- MD5 b8bd658496a7de658fa9755d7e23eb41
- SHA1 3a6dfdcd8893afb9ef7243acb8e2751e2d00b9f2
- SHA512 a431b212ec86cdb7f1e79ce218fb5fc0ad300f9321a815e2c07cf03e58fcbc93468992e6abeea79c5bfabc12f37161317516482a7c38245daaaf096f2d805975
- SSDEEP 12288:o3wSfxL/2Dc3bDLLmt0LDQewsAjtf2UIttPfN8TrMz5/4ShhufalzE+eNd2uWvVy:2mewsAjt+UWPF8T4z1huSmRNJVmIcT+
- TLSH T14A15E031FF74E032C77B0DB21B26C71A147D79610B6219C3F3A89E9E49242D267B6A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_b8bd658496a7de658fa9755d7e23eb41_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b8bd658496a7de658fa9755d7e23eb41_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 28554ef5e9108778701a5a2e9489c32e6b3743ac751c02a77f8a2bab0677d200
- MD5 b8bd658496a7de658fa9755d7e23eb41
- SHA1 3a6dfdcd8893afb9ef7243acb8e2751e2d00b9f2
- SHA512 a431b212ec86cdb7f1e79ce218fb5fc0ad300f9321a815e2c07cf03e58fcbc93468992e6abeea79c5bfabc12f37161317516482a7c38245daaaf096f2d805975
- SSDEEP 12288:o3wSfxL/2Dc3bDLLmt0LDQewsAjtf2UIttPfN8TrMz5/4ShhufalzE+eNd2uWvVy:2mewsAjt+UWPF8T4z1huSmRNJVmIcT+
- TLSH T14A15E031FF74E032C77B0DB21B26C71A147D79610B6219C3F3A89E9E49242D267B6A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1