General
- Target 2026-07-12_939832f84899f1d157308e0c514a3c9a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260712-pgntkshx4p
- SHA256 dc5d845d5c6a38daa880a23e8447b9124b81976ea195e603ef6312f26dc60f2b
- MD5 939832f84899f1d157308e0c514a3c9a
- SHA1 9fad257e24ce14b0b109aff4ce382480e13a5774
- SHA512 168e89bc13f434b704ecfb324ca51909a29d28584a9159d296ad72a4536662dc8a3be0bed58495f219ad158f1c8de55f603257f44bc2b11479bce5f8ef0dc058
- SSDEEP 24576:tmewsAjYSTltolx8EKv2e5DhzdsMHZlB:IljBt7EstBddsUlB
- TLSH T10D15E031FBB4E036C6BF0DB21B35D716587D69204B521AC3E3A84E9D9A701C22776E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_939832f84899f1d157308e0c514a3c9a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_939832f84899f1d157308e0c514a3c9a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_939832f84899f1d157308e0c514a3c9a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 dc5d845d5c6a38daa880a23e8447b9124b81976ea195e603ef6312f26dc60f2b
- MD5 939832f84899f1d157308e0c514a3c9a
- SHA1 9fad257e24ce14b0b109aff4ce382480e13a5774
- SHA512 168e89bc13f434b704ecfb324ca51909a29d28584a9159d296ad72a4536662dc8a3be0bed58495f219ad158f1c8de55f603257f44bc2b11479bce5f8ef0dc058
- SSDEEP 24576:tmewsAjYSTltolx8EKv2e5DhzdsMHZlB:IljBt7EstBddsUlB
- TLSH T10D15E031FBB4E036C6BF0DB21B35D716587D69204B521AC3E3A84E9D9A701C22776E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1