General
- Target 2026-07-18_883061210fb08192266cbd70a106f118_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop
- Size 12.1MB
- Sample260718-h4s89aft91
- SHA256 dcde12ea6066fedd5e6ce4474b6634cc7a575db6e464ee714b7a73fcf26ca531
- MD5 883061210fb08192266cbd70a106f118
- SHA1 6cbfb63645071f2d89f5d064e2fecf7048772040
- SHA512 7cd255a496824f2574ea9aa98044ccdc25c1956b657378f46d603b903e4419e4e52ff0139e075e6bf41c552d5ed09a2d8d63bb1c867a8822a0f1b53920278360
- SSDEEP 196608:nww7K7rpAG5uHgOx9kGYhjfHUbT4xaccQcU9hrHY5x/mhK1gp7:j2eVxzaTHUA4c/cUrk5x/m2W
- TLSH T1F9D6CF45F2B3A174D55B0F70102AA53A6B74DF02CF1CCDEBF988B8346A3269D592B217
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_883061210fb08192266cbd70a106f118_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_883061210fb08192266cbd70a106f118_amadey_darkgate_elex_glassworm_remcos_rhadamanthys_stop
- Size 12.1MB
- SHA256 dcde12ea6066fedd5e6ce4474b6634cc7a575db6e464ee714b7a73fcf26ca531
- MD5 883061210fb08192266cbd70a106f118
- SHA1 6cbfb63645071f2d89f5d064e2fecf7048772040
- SHA512 7cd255a496824f2574ea9aa98044ccdc25c1956b657378f46d603b903e4419e4e52ff0139e075e6bf41c552d5ed09a2d8d63bb1c867a8822a0f1b53920278360
- SSDEEP 196608:nww7K7rpAG5uHgOx9kGYhjfHUbT4xaccQcU9hrHY5x/mhK1gp7:j2eVxzaTHUA4c/cUrk5x/m2W
- TLSH T1F9D6CF45F2B3A174D55B0F70102AA53A6B74DF02CF1CCDEBF988B8346A3269D592B217
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects BTMOB RAT
-
Detects Windows executables referencing non-Windows User-Agents