General
- Target 2026-07-06_234fa91eab33c1fd0f21303af10a3c4f_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_stop
- Size 2.8MB
- Sample260706-196qmscw81
- SHA256 5789c44f5a2667bd5ab49cb17e837cec63a8bd7ab1ef0cdc07f42945896cebab
- MD5 234fa91eab33c1fd0f21303af10a3c4f
- SHA1 faf9863e831de2732451e302ade37251820746b8
- SHA512 c97bfbb816cdf16257facf96ef35dbefbecf423e6868ea1cb0b255feb43ee5cdf8dce9a9dcaa6860ee1fa1cc1accf6e65d9ae80b8d2eb4d2a57ed5f0254cd953
- SSDEEP 24576:PhM84pb+SBC2NLzEoym1uBv3gsVXpFSI8LUlFl5Fpu0Le5ji0hmxNrMid4Kplk:PhM84pyS9XUv3lVZ/cY/uPji0Aj7Xp
- TLSH T1C7D54B12B6A44931D462C27189A1FA8D95367D109B338F8B22C57EDEFFF27C15926332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_234fa91eab33c1fd0f21303af10a3c4f_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_234fa91eab33c1fd0f21303af10a3c4f_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_234fa91eab33c1fd0f21303af10a3c4f_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_stop
- Size 2.8MB
- SHA256 5789c44f5a2667bd5ab49cb17e837cec63a8bd7ab1ef0cdc07f42945896cebab
- MD5 234fa91eab33c1fd0f21303af10a3c4f
- SHA1 faf9863e831de2732451e302ade37251820746b8
- SHA512 c97bfbb816cdf16257facf96ef35dbefbecf423e6868ea1cb0b255feb43ee5cdf8dce9a9dcaa6860ee1fa1cc1accf6e65d9ae80b8d2eb4d2a57ed5f0254cd953
- SSDEEP 24576:PhM84pb+SBC2NLzEoym1uBv3gsVXpFSI8LUlFl5Fpu0Le5ji0hmxNrMid4Kplk:PhM84pyS9XUv3lVZ/cY/uPji0Aj7Xp
- TLSH T1C7D54B12B6A44931D462C27189A1FA8D95367D109B338F8B22C57EDEFFF27C15926332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.