General
- Target 2026-07-12_b2f098a2b20f486322d5b3e5b45d9710_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260712-n2ynvahs7n
- SHA256 26d2a84f1707a1c6469112b3269b8fc8cd48dacef4b33a135354c7fe88faba0c
- MD5 b2f098a2b20f486322d5b3e5b45d9710
- SHA1 1d9970831a15f3008a9e5a359587cd7aaf016c08
- SHA512 017facd5216cf911e42be555bea723bed00ac7838c8a8721005eba87e5d31f55b1bcbd24c45c76ab02bbb589d1bc784909da2e868083fea2254dbe62c790433b
- SSDEEP 12288:gRwSfxL/2Dc3bDLLmt0LDQewsAjtHZe0IvIZPXhonJ85VSc8OdSlgVIMIhkgsDuL:QmewsAjt4W5hXSHg/ehHeRqh9zS
- TLSH T1DC15E030FB74D436C37B1DB21B36C706646C79204FA62AC7E3B89D9E49702C26776A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_b2f098a2b20f486322d5b3e5b45d9710_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_b2f098a2b20f486322d5b3e5b45d9710_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_b2f098a2b20f486322d5b3e5b45d9710_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 26d2a84f1707a1c6469112b3269b8fc8cd48dacef4b33a135354c7fe88faba0c
- MD5 b2f098a2b20f486322d5b3e5b45d9710
- SHA1 1d9970831a15f3008a9e5a359587cd7aaf016c08
- SHA512 017facd5216cf911e42be555bea723bed00ac7838c8a8721005eba87e5d31f55b1bcbd24c45c76ab02bbb589d1bc784909da2e868083fea2254dbe62c790433b
- SSDEEP 12288:gRwSfxL/2Dc3bDLLmt0LDQewsAjtHZe0IvIZPXhonJ85VSc8OdSlgVIMIhkgsDuL:QmewsAjt4W5hXSHg/ehHeRqh9zS
- TLSH T1DC15E030FB74D436C37B1DB21B36C706646C79204FA62AC7E3B89D9E49702C26776A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1