General
- Target 2026-08-08_0a6e5793a753a00ebfe0634d1f0084c6_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260808-erp5aazepe
- SHA256 b8841cca452872aa6b2a96b1309e16e4630690319cf1d4f301b695a1f9fd630c
- MD5 0a6e5793a753a00ebfe0634d1f0084c6
- SHA1 0ff410fe7cc9816124d55397241fef71c5d98839
- SHA512 6834a746e9f0b0e2d3420c75ab98619de8c407fb0d32152a683a3d37c2cee6f11a2617c58bf90f95331f0e9a0dab2edd02c8b16e81ec017879c65f337584f33f
- SSDEEP 12288:eewSfxL/2Dc3bDLLmt0LDQewsAjvJhB7XJr+aLOS4QxCeD6c/UqUT/gMgyj/p83S:1mewsAjvxXJqXS4Q7DvNUJgI/H5acR
- TLSH T1C515E031FE34E432D2BB0DB22B36D716642D79204B6219C3E3E85E9E59702D22776E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_0a6e5793a753a00ebfe0634d1f0084c6_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_0a6e5793a753a00ebfe0634d1f0084c6_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_0a6e5793a753a00ebfe0634d1f0084c6_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 b8841cca452872aa6b2a96b1309e16e4630690319cf1d4f301b695a1f9fd630c
- MD5 0a6e5793a753a00ebfe0634d1f0084c6
- SHA1 0ff410fe7cc9816124d55397241fef71c5d98839
- SHA512 6834a746e9f0b0e2d3420c75ab98619de8c407fb0d32152a683a3d37c2cee6f11a2617c58bf90f95331f0e9a0dab2edd02c8b16e81ec017879c65f337584f33f
- SSDEEP 12288:eewSfxL/2Dc3bDLLmt0LDQewsAjvJhB7XJr+aLOS4QxCeD6c/UqUT/gMgyj/p83S:1mewsAjvxXJqXS4Q7DvNUJgI/H5acR
- TLSH T1C515E031FE34E432D2BB0DB22B36D716642D79204B6219C3E3E85E9E59702D22776E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1