General
- Target 2026-08-03_eb862b1be7bf649a6d99938dfd09eaac_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260804-k3cafsbp6x
- SHA256 11b8a0a9796049098abdb2d34108bc84380f120c71169cc276742d56e9de5f9d
- MD5 eb862b1be7bf649a6d99938dfd09eaac
- SHA1 a98d89d6df67fa2f17dd0ae6680b21f8130921b2
- SHA512 ecbefde405f47eaeb125ee0032486547aa7bef3273020f30cd4321661965edbded248d88883dfe7ae3f35dd02f674cbe42cc30acce9c7f1af23b4a6b610631d0
- SSDEEP 24576:GmewsAjxT7Jckdwi6i9bNrqq4E41WFpW3oRos:FljB7Jckdwi3N7+WTW3
- TLSH T1D015E031FA74E436C37B0DB21B36D716647C7A204F512AC3E3E89A9D59342D22376E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_eb862b1be7bf649a6d99938dfd09eaac_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_eb862b1be7bf649a6d99938dfd09eaac_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_eb862b1be7bf649a6d99938dfd09eaac_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 11b8a0a9796049098abdb2d34108bc84380f120c71169cc276742d56e9de5f9d
- MD5 eb862b1be7bf649a6d99938dfd09eaac
- SHA1 a98d89d6df67fa2f17dd0ae6680b21f8130921b2
- SHA512 ecbefde405f47eaeb125ee0032486547aa7bef3273020f30cd4321661965edbded248d88883dfe7ae3f35dd02f674cbe42cc30acce9c7f1af23b4a6b610631d0
- SSDEEP 24576:GmewsAjxT7Jckdwi6i9bNrqq4E41WFpW3oRos:FljB7Jckdwi3N7+WTW3
- TLSH T1D015E031FA74E436C37B0DB21B36D716647C7A204F512AC3E3E89A9D59342D22376E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1