General
- Target 2026-07-28_81ffbfffe204319735680947b3c0e8d3_amadey_darkgate_elex_gcleaner_glassworm_remcos_smoke-loader
- Size 13.5MB
- Sample260728-far3zsyare
- SHA256 58af3c28ba018459ebc400c0abe4509d0b4ff12ed8149987785d75306d4c45a6
- MD5 81ffbfffe204319735680947b3c0e8d3
- SHA1 366178b6d14b6f368468c53a4257883f2e172d1a
- SHA512 b4f1a2a29d6162f2b129cd53daaef431d53acb334b7596ddfc3089e3182f9ebfb8543ca1e6ff32d5cbe9814a75c57b2142ce2864615e78b5d729f9e2e0276e5c
- SSDEEP 196608:Ome1TyRihOvMAzlQnKtcKtVijeTxkmjFWQ55byl0jbFEZM5Z/qCe5ywSd:O/iiIvMAqKtJtVijERW85elWWY9
- TLSH T137E6AF12B3918827E17637F64865CB55182D7D600F64A5CB2AF83E0D9E35AC3EE3264F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_81ffbfffe204319735680947b3c0e8d3_amadey_darkgate_elex_gcleaner_glassworm_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_81ffbfffe204319735680947b3c0e8d3_amadey_darkgate_elex_gcleaner_glassworm_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_81ffbfffe204319735680947b3c0e8d3_amadey_darkgate_elex_gcleaner_glassworm_remcos_smoke-loader
- Size 13.5MB
- SHA256 58af3c28ba018459ebc400c0abe4509d0b4ff12ed8149987785d75306d4c45a6
- MD5 81ffbfffe204319735680947b3c0e8d3
- SHA1 366178b6d14b6f368468c53a4257883f2e172d1a
- SHA512 b4f1a2a29d6162f2b129cd53daaef431d53acb334b7596ddfc3089e3182f9ebfb8543ca1e6ff32d5cbe9814a75c57b2142ce2864615e78b5d729f9e2e0276e5c
- SSDEEP 196608:Ome1TyRihOvMAzlQnKtcKtVijeTxkmjFWQ55byl0jbFEZM5Z/qCe5ywSd:O/iiIvMAqKtJtVijERW85elWWY9
- TLSH T137E6AF12B3918827E17637F64865CB55182D7D600F64A5CB2AF83E0D9E35AC3EE3264F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.