General
- Target 2026-07-14_0559257320f490d6d6b09136d810fc31_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260714-fac9tsev4j
- SHA256 44f890e1d746e69bcb3e87a8821d16c82915b1363744e106dafee446eab05da6
- MD5 0559257320f490d6d6b09136d810fc31
- SHA1 aa70e0021192e0e6dfeaac91e07970820c222794
- SHA512 0f93351fa08bcc3afed9fea8eb323e32a9d130652ce51b6b126bd451c04251b35e5ed70ad9e73fab04efc292e2aee93a1a36ebe08cdebac0d0afc39f7e3f51ae
- SSDEEP 12288:/lwSfxL/2Dc3bDLLmt0LDQewsAjudmEIvenKDXj0uRp+Kdbglj3HZJQUdCOXl5dh:dmewsAjUjIvAKP0ApmljPzdAln1u
- TLSH T1D915E031FF74E032C77B0DB62B31C706642D6A604B5129C7E3B89E9E59301D2677AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_0559257320f490d6d6b09136d810fc31_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_0559257320f490d6d6b09136d810fc31_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_0559257320f490d6d6b09136d810fc31_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 44f890e1d746e69bcb3e87a8821d16c82915b1363744e106dafee446eab05da6
- MD5 0559257320f490d6d6b09136d810fc31
- SHA1 aa70e0021192e0e6dfeaac91e07970820c222794
- SHA512 0f93351fa08bcc3afed9fea8eb323e32a9d130652ce51b6b126bd451c04251b35e5ed70ad9e73fab04efc292e2aee93a1a36ebe08cdebac0d0afc39f7e3f51ae
- SSDEEP 12288:/lwSfxL/2Dc3bDLLmt0LDQewsAjudmEIvenKDXj0uRp+Kdbglj3HZJQUdCOXl5dh:dmewsAjUjIvAKP0ApmljPzdAln1u
- TLSH T1D915E031FF74E032C77B0DB62B31C706642D6A604B5129C7E3B89E9E59301D2677AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1