General
- Target 2026-07-28_a795b37ce0b32f1383ec7ce07118918c_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee_vidar
- Size 30.6MB
- Sample260728-e6tq1sar7y
- SHA256 e04a5300ade4e7397540d6e623d446b86eec905376de922502f18449d1356fef
- MD5 a795b37ce0b32f1383ec7ce07118918c
- SHA1 1ae64b528d04d4d9f850f27f1f964cf89f316ad3
- SHA512 90181a428c5fd1615b7e6e9333908d3f2cf6f68fcef1157fc314256c3f40f43863c6941783999c77ce51a15f4cba51b82934af4648f7103e1f65ba4f383fbfff
- SSDEEP 786432:ffyTZrBBOKAG7dN6J3lEj4jtlzajQoVMC94jXq:CTZD777f6J3l51oVj94ja
- TLSH T140672331F2D0C13AE4A703B985B6B6B96A297E30471180CB67C4FEB95B319D16936337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-28_a795b37ce0b32f1383ec7ce07118918c_amadey_darkgate_elex_glassworm_redline-stealer_rhadamant.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_a795b37ce0b32f1383ec7ce07118918c_amadey_darkgate_elex_glassworm_redline-stealer_rhadamant.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_a795b37ce0b32f1383ec7ce07118918c_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee_vidar
- Size 30.6MB
- SHA256 e04a5300ade4e7397540d6e623d446b86eec905376de922502f18449d1356fef
- MD5 a795b37ce0b32f1383ec7ce07118918c
- SHA1 1ae64b528d04d4d9f850f27f1f964cf89f316ad3
- SHA512 90181a428c5fd1615b7e6e9333908d3f2cf6f68fcef1157fc314256c3f40f43863c6941783999c77ce51a15f4cba51b82934af4648f7103e1f65ba4f383fbfff
- SSDEEP 786432:ffyTZrBBOKAG7dN6J3lEj4jtlzajQoVMC94jXq:CTZD777f6J3l51oVj94ja
- TLSH T140672331F2D0C13AE4A703B985B6B6B96A297E30471180CB67C4FEB95B319D16936337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.