General
- Target 2026-07-09_b9fddb0d84de7203a26873a68bd18996_amadey_darkgate_elex_gcleaner_glassworm_remcos_swisyn_wannacry
- Size 52.3MB
- Sample260709-rwce7sb16p
- SHA256 a29a2bf5f812bc7443aa94e7754003875c78f0430c19d83debe671e1589bf992
- MD5 b9fddb0d84de7203a26873a68bd18996
- SHA1 39c1b3fcb5a18e57a40f224f40726d6c3b226cd9
- SHA512 5651bad6aedce3fb64abd17aacafcc9918b2748c2792fb98579ed6549a3045689d367e980fd82b13cde1139fe421ef15c2bf010d28d3e7ee557963da0b41b33c
- SSDEEP 786432:iTN2u21FNJKFUebtIa/VK3flHkvLEhvL/7Dao4BxMGzV2u:iTGD6tIa/iflHkvL4vLTDaoUx7L
- TLSH T188C74952B340D8ABC16619367E67D7E0593BFE913D12692B36A43FCD1F71B803E26212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_b9fddb0d84de7203a26873a68bd18996_amadey_darkgate_elex_gcleaner_glassworm_remcos_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_b9fddb0d84de7203a26873a68bd18996_amadey_darkgate_elex_gcleaner_glassworm_remcos_swisyn_wannacry.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_b9fddb0d84de7203a26873a68bd18996_amadey_darkgate_elex_gcleaner_glassworm_remcos_swisyn_wannacry
- Size 52.3MB
- SHA256 a29a2bf5f812bc7443aa94e7754003875c78f0430c19d83debe671e1589bf992
- MD5 b9fddb0d84de7203a26873a68bd18996
- SHA1 39c1b3fcb5a18e57a40f224f40726d6c3b226cd9
- SHA512 5651bad6aedce3fb64abd17aacafcc9918b2748c2792fb98579ed6549a3045689d367e980fd82b13cde1139fe421ef15c2bf010d28d3e7ee557963da0b41b33c
- SSDEEP 786432:iTN2u21FNJKFUebtIa/VK3flHkvLEhvL/7Dao4BxMGzV2u:iTGD6tIa/iflHkvL4vLTDaoUx7L
- TLSH T188C74952B340D8ABC16619367E67D7E0593BFE913D12692B36A43FCD1F71B803E26212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2