General
- Target 2026-08-03_f9765d70099c8653194b6bbd47b02dd5_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260804-krypbagd27
- SHA256 6fea57cacb087be42e639abd73ec81388c9bbc0e4611ef165c4260164c00e015
- MD5 f9765d70099c8653194b6bbd47b02dd5
- SHA1 8131a96e5574088197995f3b18b4bb4c2ddd5c39
- SHA512 9d4eac7c9e5293a0bd529c23d0206ed2ab77bd26dc10c4caf269f7237cd01f76d7e847d801fa718ba2c7f0a3846ef3dc6cb35a715ffcfbabbf20e9c25b9346a0
- SSDEEP 12288:M8wSfxL/2Dc3bDLLmt0LDQewsAjUTghfNyhmtyu1TmWXwwhQyjMoMyshchv+t0cQ:ZmewsAj1yh67TbhQyOhcJ+dmHqxgj
- TLSH T13B15E031FE74E032C2BB0DB21B36D716547C79204BA11AC7E3A89E9D59702E22776B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f9765d70099c8653194b6bbd47b02dd5_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f9765d70099c8653194b6bbd47b02dd5_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 6fea57cacb087be42e639abd73ec81388c9bbc0e4611ef165c4260164c00e015
- MD5 f9765d70099c8653194b6bbd47b02dd5
- SHA1 8131a96e5574088197995f3b18b4bb4c2ddd5c39
- SHA512 9d4eac7c9e5293a0bd529c23d0206ed2ab77bd26dc10c4caf269f7237cd01f76d7e847d801fa718ba2c7f0a3846ef3dc6cb35a715ffcfbabbf20e9c25b9346a0
- SSDEEP 12288:M8wSfxL/2Dc3bDLLmt0LDQewsAjUTghfNyhmtyu1TmWXwwhQyjMoMyshchv+t0cQ:ZmewsAj1yh67TbhQyOhcJ+dmHqxgj
- TLSH T13B15E031FE74E032C2BB0DB21B36D716547C79204BA11AC7E3A89E9D59702E22776B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1