General
- Target 2026-07-29_a6b8e4a86a0f90ac420b233e453df04c_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260729-2a3elsw1b1
- SHA256 8355d6c599b4a5b412d07b51c83c693d0b1aa1fab262e84b57e43b9a0a749e04
- MD5 a6b8e4a86a0f90ac420b233e453df04c
- SHA1 8e97a4fd5843da0acacded7f7d076e7c3e727526
- SHA512 b91336ec6b321f2cd3b1a19faebc957f72d470d348a00189e7035d66ba69eb3ac3c7f38c52dbb3e91fd20b972d32f48bb232d04f0ffa85f994cdd6a298c110c2
- SSDEEP 12288:kawSfxL/2Dc3bDLLmt0LDQewsAjQ+XD2DU5iHUbaaaFcQazg8D8+Hf3nOTwjNse/:3mewsAjQ+XP5uszauvzbHvnEeYkm4d
- TLSH T13D15E031FF74E436D3BF0DB21B35D716187D69204B911AC3E3A84E9D5A202D227B6A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a6b8e4a86a0f90ac420b233e453df04c_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a6b8e4a86a0f90ac420b233e453df04c_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a6b8e4a86a0f90ac420b233e453df04c_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 8355d6c599b4a5b412d07b51c83c693d0b1aa1fab262e84b57e43b9a0a749e04
- MD5 a6b8e4a86a0f90ac420b233e453df04c
- SHA1 8e97a4fd5843da0acacded7f7d076e7c3e727526
- SHA512 b91336ec6b321f2cd3b1a19faebc957f72d470d348a00189e7035d66ba69eb3ac3c7f38c52dbb3e91fd20b972d32f48bb232d04f0ffa85f994cdd6a298c110c2
- SSDEEP 12288:kawSfxL/2Dc3bDLLmt0LDQewsAjQ+XD2DU5iHUbaaaFcQazg8D8+Hf3nOTwjNse/:3mewsAjQ+XP5uszauvzbHvnEeYkm4d
- TLSH T13D15E031FF74E436D3BF0DB21B35D716187D69204B911AC3E3A84E9D5A202D227B6A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1