General
- Target 2026-07-21_7d315394cf6bb33e71f8e5e52152d230_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260721-c2tt4scx4p
- SHA256 41f8750b470312e6c3b343a6baca4f32df4f9032d5f7e9f72d970daa9a937e61
- MD5 7d315394cf6bb33e71f8e5e52152d230
- SHA1 5c6a4a4513e394eb6ac685bfc1f472d5f12387aa
- SHA512 9a3811146c21b14bc6a052ea359b230e3700b74ce625e6ed719eb74ee8a0fb6964fa1a766344e38ada71c835c3b3cffaf410c460da15f2996df752514657847f
- SSDEEP 12288:L8wSfxL/2Dc3bDLLmt0LDQewsAj5YM5xUj1cwDPPrrDYawqauY0eT2l+cl0kz8Nq:QmewsAj5YMHUjXDXzYawbl0e6lYDNq
- TLSH T15A15E031FE74D036C77B0DB21B25C716247DB9604B611AC3E3E88E9E5D702D22376A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_7d315394cf6bb33e71f8e5e52152d230_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_7d315394cf6bb33e71f8e5e52152d230_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_7d315394cf6bb33e71f8e5e52152d230_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 41f8750b470312e6c3b343a6baca4f32df4f9032d5f7e9f72d970daa9a937e61
- MD5 7d315394cf6bb33e71f8e5e52152d230
- SHA1 5c6a4a4513e394eb6ac685bfc1f472d5f12387aa
- SHA512 9a3811146c21b14bc6a052ea359b230e3700b74ce625e6ed719eb74ee8a0fb6964fa1a766344e38ada71c835c3b3cffaf410c460da15f2996df752514657847f
- SSDEEP 12288:L8wSfxL/2Dc3bDLLmt0LDQewsAj5YM5xUj1cwDPPrrDYawqauY0eT2l+cl0kz8Nq:QmewsAj5YMHUjXDXzYawbl0e6lYDNq
- TLSH T15A15E031FE74D036C77B0DB21B25C716247DB9604B611AC3E3E88E9E5D702D22376A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1