General
- Target 2026-08-04_5433571063ff5cae6f51d76ce135094a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260804-h4ee4ayxfz
- SHA256 43f89531528784751acfd9c9cb908aaff07288a925816b9834a215c33ce766ae
- MD5 5433571063ff5cae6f51d76ce135094a
- SHA1 b2d49a6117b36cc543a7c0b0ec73328b9984b311
- SHA512 3fa1b5285c919889d6948fbcd18c563d88e72478fae6ef9338778c4cd2cbc4aecd0124ba465e736dbe8e14854f6446ff04bda49c4a11481c18374e22fe611002
- SSDEEP 24576:/mewsAjOKB2DOdyyEe/Tw7RvojeH6zUe+YZb:Olj5sY/Tw7RSeazU1S
- TLSH T14515E031FEB4E436C3BF0DB11B36C706147D69604BA119C3E3A89E9D49306D2677AA1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_5433571063ff5cae6f51d76ce135094a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_5433571063ff5cae6f51d76ce135094a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5433571063ff5cae6f51d76ce135094a_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 43f89531528784751acfd9c9cb908aaff07288a925816b9834a215c33ce766ae
- MD5 5433571063ff5cae6f51d76ce135094a
- SHA1 b2d49a6117b36cc543a7c0b0ec73328b9984b311
- SHA512 3fa1b5285c919889d6948fbcd18c563d88e72478fae6ef9338778c4cd2cbc4aecd0124ba465e736dbe8e14854f6446ff04bda49c4a11481c18374e22fe611002
- SSDEEP 24576:/mewsAjOKB2DOdyyEe/Tw7RvojeH6zUe+YZb:Olj5sY/Tw7RSeazU1S
- TLSH T14515E031FEB4E436C3BF0DB11B36C706147D69604BA119C3E3A89E9D49306D2677AA1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1