General
- Target 2026-07-08_f888e110254cc85c7abb71a48221b8d1_amadey_darkgate_glassworm_hawkeye_mespinoza_smoke-loader
- Size 874KB
- Sample260708-r2dkfshw9p
- SHA256 984a1374e43bf58e0d387df1c202c9fd7b30e4f89019389cd6f56b483c1cf8d0
- MD5 f888e110254cc85c7abb71a48221b8d1
- SHA1 bb6416e0266c5f056783ca79beace21aa8b009b8
- SHA512 ff878d7c463dc7edb9f0988f93682eaa02c8ad9c53a78882fc50e237c702ec392810646c58237761372ec3f3727d4767a68ce64fc1a6bb8f23a132abcdacfb30
- SSDEEP 12288:NoGAwSfxL/2Dc3jDLLmt0LDQewsAjRuM89FF96X0JxQFFsS:NobaewsAjY59FF96X0JxQJ
- TLSH T18B154B21AAA087FECEB30431CE659735643CBE600F11F5D7A2AC7B5D9830ED16637A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f888e110254cc85c7abb71a48221b8d1_amadey_darkgate_glassworm_hawkeye_mespinoza_smoke-loader.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f888e110254cc85c7abb71a48221b8d1_amadey_darkgate_glassworm_hawkeye_mespinoza_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f888e110254cc85c7abb71a48221b8d1_amadey_darkgate_glassworm_hawkeye_mespinoza_smoke-loader
- Size 874KB
- SHA256 984a1374e43bf58e0d387df1c202c9fd7b30e4f89019389cd6f56b483c1cf8d0
- MD5 f888e110254cc85c7abb71a48221b8d1
- SHA1 bb6416e0266c5f056783ca79beace21aa8b009b8
- SHA512 ff878d7c463dc7edb9f0988f93682eaa02c8ad9c53a78882fc50e237c702ec392810646c58237761372ec3f3727d4767a68ce64fc1a6bb8f23a132abcdacfb30
- SSDEEP 12288:NoGAwSfxL/2Dc3jDLLmt0LDQewsAjRuM89FF96X0JxQFFsS:NobaewsAjY59FF96X0JxQJ
- TLSH T18B154B21AAA087FECEB30431CE659735643CBE600F11F5D7A2AC7B5D9830ED16637A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.