Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 02:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1e41ef1e17523212eb95056e6bb59856_amadey_darkgate_elex_gcleaner_glassworm_helldown_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1e41ef1e17523212eb95056e6bb59856_amadey_darkgate_elex_gcleaner_glassworm_helldown_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-10_1e41ef1e17523212eb95056e6bb59856_amadey_darkgate_elex_gcleaner_glassworm_helldown_remcos_smoke-loader_stop.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-10_1e41ef1e17523212eb95056e6bb59856_amadey_darkgate_elex_gcleaner_glassworm_helldown_remcos_smoke-loader_stop.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-10_1e41ef1e17523212eb95056e6bb59856_amadey_darkgate_elex_gcleaner_glassworm_helldown_remcos_smoke-loader_stop.exe
- Size 7.6MB
- Sample260810-dfnlmszele
- SHA256 a68e9b68857e6e64caca2730d25e63237258634915ac438a99170114f5b275a6
- MD5 1e41ef1e17523212eb95056e6bb59856
- SHA1 3f9147141e8c78543f1196dbd8ae92213a9c0e7a
- SHA512 38a2ebf736c565e5445f0f6ecff8f871f4bb283ad9e2bb98e60d070a03a747d251318f68407081f8011967fef29feca965040c3273e220f4d847700197b764d7
- SSDEEP 98304:jj6CVTGknkW3s2v3CCmENMuNk2FX7QudlS35hh8KlJbaC5qOWXGIZVl9WGxyASr+:N9n3xmEN1k2FUud03/h8qPFWfTPyZOhh
- TLSH T10F86E112F2E2C0B1D1560230462A737BA778A7294B209ED7F7C4DD796F316D2E23A25D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10