General
- Target 2026-07-17_ac9c732e409bb515f7e4fa8dc76b9d5c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 1.5MB
- Sample260717-gyrmssf19s
- SHA256 4129bb742acd55c374b33b2e6b43adc57531ce11cf2c601d45d788e90c4138fc
- MD5 ac9c732e409bb515f7e4fa8dc76b9d5c
- SHA1 0f23148c80b739a9c1d40369d828e01e3e51096f
- SHA512 2015790ce40e9a43bfe9f9955e189d4f6a9efd49f89cd785ae15db7fff58853dbf43b02e60a2315ef9611ab0773ea6c99d7c782832ddd03f611b0d0a5cc4b43a
- SSDEEP 24576:CRpLVFPbthieraHDowhBNcAmcGwSxC+pOx4F7tEnzvdlRl2sBi:CRpL/bC/9PmGGpOx45tEnRjlDi
- TLSH T10965AF22F7C1857AC16365B50D97A366A52BBF102F2491C7BBE43E0C5E342E13D393A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ac9c732e409bb515f7e4fa8dc76b9d5c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ac9c732e409bb515f7e4fa8dc76b9d5c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ac9c732e409bb515f7e4fa8dc76b9d5c_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 1.5MB
- SHA256 4129bb742acd55c374b33b2e6b43adc57531ce11cf2c601d45d788e90c4138fc
- MD5 ac9c732e409bb515f7e4fa8dc76b9d5c
- SHA1 0f23148c80b739a9c1d40369d828e01e3e51096f
- SHA512 2015790ce40e9a43bfe9f9955e189d4f6a9efd49f89cd785ae15db7fff58853dbf43b02e60a2315ef9611ab0773ea6c99d7c782832ddd03f611b0d0a5cc4b43a
- SSDEEP 24576:CRpLVFPbthieraHDowhBNcAmcGwSxC+pOx4F7tEnzvdlRl2sBi:CRpL/bC/9PmGGpOx45tEnRjlDi
- TLSH T10965AF22F7C1857AC16365B50D97A366A52BBF102F2491C7BBE43E0C5E342E13D393A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE