General
- Target 2026-07-07_eae867d566282a05309f449171c028df_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop
- Size 7.7MB
- Sample260707-2dbq3afz2m
- SHA256 2e1b63537528fcd8df832b4139cf117080ef632ce44bcfb3593f79f6d1d03ebc
- MD5 eae867d566282a05309f449171c028df
- SHA1 e7602117021ad9598354eca2d13e2c900f8bce00
- SHA512 680c6d5ba14c83abe0f8fc6d0aaa70b6f8c550b40b1bf5aa3e9c749e8f8ffabfb21235212e1bfbf505e24a410d29c17fba2e647b53e79f8493ded1edec7666da
- SSDEEP 98304:CZSRBK1BAjTeanAvdzQmOTs8/ppvoerst+j9Rm2SnmPUTtlJdcSwGk6YNYi:2SyubloGvo6ZGnYxY
- TLSH T14F868D00E7D7C2B1C9C93AB43028725F85227D445724AAE3DBE83D5AE8B61D079F72B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_eae867d566282a05309f449171c028df_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_eae867d566282a05309f449171c028df_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_eae867d566282a05309f449171c028df_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop
- Size 7.7MB
- SHA256 2e1b63537528fcd8df832b4139cf117080ef632ce44bcfb3593f79f6d1d03ebc
- MD5 eae867d566282a05309f449171c028df
- SHA1 e7602117021ad9598354eca2d13e2c900f8bce00
- SHA512 680c6d5ba14c83abe0f8fc6d0aaa70b6f8c550b40b1bf5aa3e9c749e8f8ffabfb21235212e1bfbf505e24a410d29c17fba2e647b53e79f8493ded1edec7666da
- SSDEEP 98304:CZSRBK1BAjTeanAvdzQmOTs8/ppvoerst+j9Rm2SnmPUTtlJdcSwGk6YNYi:2SyubloGvo6ZGnYxY
- TLSH T14F868D00E7D7C2B1C9C93AB43028725F85227D445724AAE3DBE83D5AE8B61D079F72B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.