2026-07-06_346ade743ad7e13cd8b8128151e5dcac_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_346ade743ad7e13cd8b8128151e5dcac_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader
Size 705KB
Sample260707-e3y7bsey7k
SHA256 1c472883a15be16fc24ce79414fa3e430fc4e3d80b9847b03de71a82a728ae22
MD5 346ade743ad7e13cd8b8128151e5dcac
SHA1 dc762e2d2c28e4fb56b005b33a7ae241115dcd95
SHA512 d09e1fdbf91386f1b833934f9abf1b9b653220377649358d73f3e4bd7e71e4e59553fcc64017382b135ada481fa7b41032bf1352047e06be74a5ec01613e19e2
SSDEEP 12288:ZNQvvFAwSfxL/2Dc3jDLLmt0LDQewsAjRa05tacAcKfaoN1iU:bQGaewsAjj5tauKf91R
TLSH
T1C1E48D21F7B4C871D67B49714A31C712D93ABC114F208ACFA3E49A5E5E332D16A39F26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_346ade743ad7e13cd8b8128151e5dcac_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader

File Explorer

2026-07-06_346ade743ad7e13cd8b8128151e5dcac_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader

.exe 705KB

2026-07-06_346ade743ad7e13cd8b8128151e5dcac_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader

IMPHASH 023408dbf6d3cd7e20eaafd16d0b11dc
SHA256 1c472883a15be16fc24ce79414fa3e430fc4e3d80b9847b03de71a82a728ae22
MD5 346ade743ad7e13cd8b8128151e5dcac
SHA1 dc762e2d2c28e4fb56b005b33a7ae241115dcd95
SHA512 d09e1fdbf91386f1b833934f9abf1b9b653220377649358d73f3e4bd7e71e4e59553fcc64017382b135ada481fa7b41032bf1352047e06be74a5ec01613e19e2
SSDEEP 12288:ZNQvvFAwSfxL/2Dc3jDLLmt0LDQewsAjRa05tacAcKfaoN1iU:bQGaewsAjj5tauKf91R
TLSH
T1C1E48D21F7B4C871D67B49714A31C712D93ABC114F208ACFA3E49A5E5E332D16A39F26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19346

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\jenkins\workspace\8-2-build-windows-i586-cygwin-sans-NAS\jdk8u421\1068\build\windows-i586\deploy\tmp\javacplexec\obj\javacpl.pdb

user32

GetWindowThreadProcessId CloseDesktop OpenInputDesktop MessageBoxW wsprintfW GetShellWindow LoadStringW

kernel32

GlobalFree WideCharToMultiByte GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA RaiseException GetEnvironmentVariableW GetLongPathNameW CloseHandle GetLastError FreeLibrary GetModuleFileNameW GetProcAddress LoadLibraryW FormatMessageW VerSetConditionMask CreateFileW GetShortPathNameW GetTempPathW InitializeCriticalSectionAndSpinCount DeleteCriticalSection WaitForSingleObject GetCurrentProcess CreateProcessW OpenProcess GlobalMemoryStatusEx GetLocalTime GetSystemDirectoryW GetWindowsDirectoryW GetVersionExW GetNativeSystemInfo GetModuleHandleW GlobalAlloc MultiByteToWideChar LocalAlloc LocalFree lstrlenW VerifyVersionInfoW WTSGetActiveConsoleSessionId OutputDebugStringW GetCurrentProcessId GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead

ole32

StringFromCLSID CoTaskMemFree

oleaut32

SysAllocStringByteLen VariantClear SysAllocString SysFreeString SysStringLen

vcruntime140

_except_handler4_common __std_exception_copy __CxxFrameHandler3 memset _CxxThrowException memcpy __current_exception __current_exception_context __std_exception_destroy

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vswprintf_s _wfopen_s __stdio_common_vfwprintf_s fclose __stdio_common_vsnwprintf_s

api-ms-win-crt-filesystem-l1-1-0

_stat64i32 _wstat64i32 _wsplitpath_s

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _set_app_type _crt_atexit _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _errno _invalid_parameter_noinfo _controlfp_s _register_onexit_function _seh_filter_exe

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-environment-l1-1-0

_wdupenv_s _wputenv

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s wcsncpy_s _wcsicmp

api-ms-win-crt-time-l1-1-0

_ftime64_s wcsftime _localtime64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_346ade743ad7e13cd8b8128151e5dcac_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader

user32

kernel32

ole32

oleaut32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic