General
- Target 2026-08-04_74e13d942cd80d99064f37aae36c4b61_amadey_darkgate_elex_glassworm_remcos_smoke-loader_wannacry
- Size 43.1MB
- Sample260804-2q7dhafl5s
- SHA256 64b1be22e9c923e1be87378cf95af6bdb2732016a48cff2e8bdeea3275555c37
- MD5 74e13d942cd80d99064f37aae36c4b61
- SHA1 86465c2f9cdfd6d8c54b52acf40e7dea7ece2212
- SHA512 c32a72d3573db78028c33011e68575473e19ca221cfe380ea5cbe097babd885d9c3bbd8df8330fa7af0e6656e6d8e078191e7b2a62f21d9059966675ebac3936
- SSDEEP 393216:FDDroleD99ZtpYEPCg/SOtkMMoEMr5M9bgcFWCt8Fb73atosDL29XjsPk4N+:V8QD9DtmzXOaFMrMgcYFYJDL2ljsp
- TLSH T1DFA7F101F3B7C1B1D686267868AA7B1FA739F9840B049FC3B3943E4A5CB22D05D77586
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_74e13d942cd80d99064f37aae36c4b61_amadey_darkgate_elex_glassworm_remcos_smoke-loader_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_74e13d942cd80d99064f37aae36c4b61_amadey_darkgate_elex_glassworm_remcos_smoke-loader_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_74e13d942cd80d99064f37aae36c4b61_amadey_darkgate_elex_glassworm_remcos_smoke-loader_wannacry
- Size 43.1MB
- SHA256 64b1be22e9c923e1be87378cf95af6bdb2732016a48cff2e8bdeea3275555c37
- MD5 74e13d942cd80d99064f37aae36c4b61
- SHA1 86465c2f9cdfd6d8c54b52acf40e7dea7ece2212
- SHA512 c32a72d3573db78028c33011e68575473e19ca221cfe380ea5cbe097babd885d9c3bbd8df8330fa7af0e6656e6d8e078191e7b2a62f21d9059966675ebac3936
- SSDEEP 393216:FDDroleD99ZtpYEPCg/SOtkMMoEMr5M9bgcFWCt8Fb73atosDL29XjsPk4N+:V8QD9DtmzXOaFMrMgcYFYJDL2ljsp
- TLSH T1DFA7F101F3B7C1B1D686267868AA7B1FA739F9840B049FC3B3943E4A5CB22D05D77586
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Suspicious use of NtSetInformationThreadHideFromDebugger