General
- Target 2026-07-09_741693a09f9f226c74f4e47f5de9ba44_amadey_darkgate_elex_emotet_glassworm_icedid_rhadamanthys_smoke-loader_stealc_tofsee
- Size 2.1MB
- Sample260709-a2drsab13x
- SHA256 2e37909997b331e7929fd13882e1141178291a2aa6560328380e38cc2532da0e
- MD5 741693a09f9f226c74f4e47f5de9ba44
- SHA1 4ed821c5e5fd5a5d70d3ac8fba355d0ee8ca5170
- SHA512 96cbfc5efb9df709432c28274517fea277d4a5d674a9078a807a78174be1a21caa45288e60cd47589be3f0573490f39038670a3c85e5ea35888ac85cdf33c447
- SSDEEP 24576:1Ma59UQRFRzeY6U1p2BFproi67o8VKIAwmNG0OR9eEYNPmMzhrPBT4My/:iObR94BFd52vniOR9Uvr6R
- TLSH T1E8A5AE13B691C0B1D24D267616FA173DAE78DF110E71CA53EB90EEB92C316119F2B60E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_741693a09f9f226c74f4e47f5de9ba44_amadey_darkgate_elex_emotet_glassworm_icedid_rhadamanthy.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_741693a09f9f226c74f4e47f5de9ba44_amadey_darkgate_elex_emotet_glassworm_icedid_rhadamanthy.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_741693a09f9f226c74f4e47f5de9ba44_amadey_darkgate_elex_emotet_glassworm_icedid_rhadamanthys_smoke-loader_stealc_tofsee
- Size 2.1MB
- SHA256 2e37909997b331e7929fd13882e1141178291a2aa6560328380e38cc2532da0e
- MD5 741693a09f9f226c74f4e47f5de9ba44
- SHA1 4ed821c5e5fd5a5d70d3ac8fba355d0ee8ca5170
- SHA512 96cbfc5efb9df709432c28274517fea277d4a5d674a9078a807a78174be1a21caa45288e60cd47589be3f0573490f39038670a3c85e5ea35888ac85cdf33c447
- SSDEEP 24576:1Ma59UQRFRzeY6U1p2BFproi67o8VKIAwmNG0OR9eEYNPmMzhrPBT4My/:iObR94BFd52vniOR9Uvr6R
- TLSH T1E8A5AE13B691C0B1D24D267616FA173DAE78DF110E71CA53EB90EEB92C316119F2B60E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.