General
- Target 2026-08-15_43b917f04e4fa7dbf02ec507846927eb_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 2.3MB
- Sample260816-dd219ayydx
- SHA256 7a2b993e449d2a57fd0a8b3e057dcf77c65c815dd6dc6236604d9bae9ab36eff
- MD5 43b917f04e4fa7dbf02ec507846927eb
- SHA1 84d3ba70fb8952042bfd24db2be80d4e95e953b9
- SHA512 1f2e88361719588b5919f6a72d6ea6a848e30c9e588a5b86f81dac0f0a8ec85b7449ea9b23b53a62f9a19f4cd21c657b2880800316a8f23666e16c3a3b354687
- SSDEEP 49152:8miU9A3qWAb8emnkd6Sc/zyZ+u4SRLgVBpVrJwOJk2M:8miYA3HAb8emOSzM+sRLgPrJh
- TLSH T176B59D12B7D1C872E55255396C7793BE1936BA101F39D9C77BE41E0C8E322C16A3A3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_43b917f04e4fa7dbf02ec507846927eb_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_43b917f04e4fa7dbf02ec507846927eb_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_43b917f04e4fa7dbf02ec507846927eb_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_stop
- Size 2.3MB
- SHA256 7a2b993e449d2a57fd0a8b3e057dcf77c65c815dd6dc6236604d9bae9ab36eff
- MD5 43b917f04e4fa7dbf02ec507846927eb
- SHA1 84d3ba70fb8952042bfd24db2be80d4e95e953b9
- SHA512 1f2e88361719588b5919f6a72d6ea6a848e30c9e588a5b86f81dac0f0a8ec85b7449ea9b23b53a62f9a19f4cd21c657b2880800316a8f23666e16c3a3b354687
- SSDEEP 49152:8miU9A3qWAb8emnkd6Sc/zyZ+u4SRLgVBpVrJwOJk2M:8miYA3HAb8emOSzM+sRLgPrJh
- TLSH T176B59D12B7D1C872E55255396C7793BE1936BA101F39D9C77BE41E0C8E322C16A3A3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application