2026-07-30_7854b929c10c54328eec435e0529e62c_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop

General

Target
2026-07-30_7854b929c10c54328eec435e0529e62c_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop
Size 1.5MB
Sample260730-ssl1xa1bkh
SHA256 e54b4d137ce298e3831e519bbf02ee136b521ef4324be95f48b1126a4be4ce84
MD5 7854b929c10c54328eec435e0529e62c
SHA1 08498a823023ffda149c70b3dd3df0ca5c6701ec
SHA512 5feee5d6d9f2f4bae22796c18d9ab9df04b46378a5a8b13035c17dcb31a217a5131a31f9534f10a3ab02e1bd4dd6a10e76898c0124e753a64676b16eab7f472c
SSDEEP 24576:uWvWL0vbP+SBC2YrRoNk7BZpDLqLTaewsAju:hA0vbWS9YrRokpDLFlju
TLSH
T1D4758D23BAA0C431E17329710A6D9721953DFD740F6146CBA3AC4E5E5A307F1BA3972B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_7854b929c10c54328eec435e0529e62c_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-30_7854b929c10c54328eec435e0529e62c_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop

.exe 1.5MB

2026-07-30_7854b929c10c54328eec435e0529e62c_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop

IMPHASH 75e7fb7458b2e2dd8c3b4d1f0020fc10
SHA256 e54b4d137ce298e3831e519bbf02ee136b521ef4324be95f48b1126a4be4ce84
MD5 7854b929c10c54328eec435e0529e62c
SHA1 08498a823023ffda149c70b3dd3df0ca5c6701ec
SHA512 5feee5d6d9f2f4bae22796c18d9ab9df04b46378a5a8b13035c17dcb31a217a5131a31f9534f10a3ab02e1bd4dd6a10e76898c0124e753a64676b16eab7f472c
SSDEEP 24576:uWvWL0vbP+SBC2YrRoNk7BZpDLqLTaewsAju:hA0vbWS9YrRokpDLFlju
TLSH
T1D4758D23BAA0C431E17329710A6D9721953DFD740F6146CBA3AC4E5E5A307F1BA3972B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9451

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\browser\app\firefox.pdb

kernel32

GetEnvironmentVariableW GetProcessIoCounters FreeLibrary SetDllDirectoryW VerSetConditionMask GetCurrentProcess SetEnvironmentVariableW GetModuleHandleW WideCharToMultiByte LoadLibraryW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx GetModuleHandleA LoadLibraryExA ExpandEnvironmentStringsW LoadLibraryExW SetFilePointerEx ReadFile CreateFileW CloseHandle IsDebuggerPresent RaiseException GetLastError GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize RtlUnwind HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree HeapAlloc SetStdHandle OutputDebugStringW GetStringTypeW CompareStringW LCMapStringW GetConsoleCP GetConsoleMode HeapReAlloc SetEnvironmentVariableA ReadConsoleW FlushFileBuffers WriteConsoleW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_7854b929c10c54328eec435e0529e62c_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop

kernel32

generic