General
- Target 2026-07-06_51635991608ccb62c482d680bf344af4_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar
- Size 2.7MB
- Sample260707-eem46ahs8y
- SHA256 7d5366dcb049e5f8a27e1160169b5bfdddb6022506d24d6418a7e8901b5295ce
- MD5 51635991608ccb62c482d680bf344af4
- SHA1 1b4dfcd8c850a8aff2bc31bb14d2f27df5119d23
- SHA512 1beed4df2df689bbb4e1cb14ffe3f1e49c9b2de41ceb2b4870b863e32bb9de9682d279520a9b1bfe8f0b1f5d64f4be4c7ee48ef2a49d60b73a5681e2db487707
- SSDEEP 49152:erOO53RTqtiYOPqnstLet3LysljjmUi6AjW/MUSdGRf3/MC5YE:erOO53PqnstLEmjxAZn5x
- TLSH T133D5E411A7F54131E1B2E9305E64920D58797E20CE238E9FB244EECDBBF95A1B931732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_51635991608ccb62c482d680bf344af4_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_51635991608ccb62c482d680bf344af4_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_51635991608ccb62c482d680bf344af4_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar
- Size 2.7MB
- SHA256 7d5366dcb049e5f8a27e1160169b5bfdddb6022506d24d6418a7e8901b5295ce
- MD5 51635991608ccb62c482d680bf344af4
- SHA1 1b4dfcd8c850a8aff2bc31bb14d2f27df5119d23
- SHA512 1beed4df2df689bbb4e1cb14ffe3f1e49c9b2de41ceb2b4870b863e32bb9de9682d279520a9b1bfe8f0b1f5d64f4be4c7ee48ef2a49d60b73a5681e2db487707
- SSDEEP 49152:erOO53RTqtiYOPqnstLet3LysljjmUi6AjW/MUSdGRf3/MC5YE:erOO53PqnstLEmjxAZn5x
- TLSH T133D5E411A7F54131E1B2E9305E64920D58797E20CE238E9FB244EECDBBF95A1B931732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.