General
- Target 2026-08-01_f931e590e245a069a57a936e0e129102_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 714KB
- Sample260801-xe1pcsfb93
- SHA256 07059b203552a711e78f3cf487943df8f95c37f14f024bbacb0fada5a7528519
- MD5 f931e590e245a069a57a936e0e129102
- SHA1 e8f68bb53fa6582c8c03f8d745eced97efab09a6
- SHA512 bd4a3c218b7d69af2c4d41f854ae97abcee0582bacba9df1e8ca08908534cca65bd925358bf646d0bd8f96a342d45146e0311c2195a31121355520e9a476d642
- SSDEEP 12288:mxGz3mDUXfy264kSxOxVOidVBRXjIjb6anfKjOEZ:m23HHkSxOZdrRfOWLZ
- TLSH T139F46D2237E4E032E2724B346F6BD2655676BC319870894FB7D43F3D2F706829A25B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f931e590e245a069a57a936e0e129102_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f931e590e245a069a57a936e0e129102_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f931e590e245a069a57a936e0e129102_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 714KB
- SHA256 07059b203552a711e78f3cf487943df8f95c37f14f024bbacb0fada5a7528519
- MD5 f931e590e245a069a57a936e0e129102
- SHA1 e8f68bb53fa6582c8c03f8d745eced97efab09a6
- SHA512 bd4a3c218b7d69af2c4d41f854ae97abcee0582bacba9df1e8ca08908534cca65bd925358bf646d0bd8f96a342d45146e0311c2195a31121355520e9a476d642
- SSDEEP 12288:mxGz3mDUXfy264kSxOxVOidVBRXjIjb6anfKjOEZ:m23HHkSxOZdrRfOWLZ
- TLSH T139F46D2237E4E032E2724B346F6BD2655676BC319870894FB7D43F3D2F706829A25B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.