General
- Target 2026-08-16_ca5e48647dab4fc68d1f7b076558dbb6_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop
- Size 13.0MB
- Sample260816-p9r2psycjb
- SHA256 d25d71091ae90600f6715e64089ee6e6a953c4bebf0318c45d59b98b20f6a11f
- MD5 ca5e48647dab4fc68d1f7b076558dbb6
- SHA1 fcfc8f36219b54a5c827dc9b416c2e377d725888
- SHA512 2d901da70888b304c02593ce1f521820e3f34cf30ce38a096baae8b5b8b6d687812334692e2048032e236e070259d2415c3d118fdc078956631da94e477f6dc6
- SSDEEP 393216:GLHLLmwqr44p87VZkmcP1NJsv6tWKFdu9C:GLrLmwqrny7A1
- TLSH T1BFD6D052EB8280B1D497347211BF622BC7776BB18B2401CBB78C6E665B70AD1ED32747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_ca5e48647dab4fc68d1f7b076558dbb6_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_ca5e48647dab4fc68d1f7b076558dbb6_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_ca5e48647dab4fc68d1f7b076558dbb6_amadey_darkgate_elex_glassworm_remcos_smoke-loader_stop
- Size 13.0MB
- SHA256 d25d71091ae90600f6715e64089ee6e6a953c4bebf0318c45d59b98b20f6a11f
- MD5 ca5e48647dab4fc68d1f7b076558dbb6
- SHA1 fcfc8f36219b54a5c827dc9b416c2e377d725888
- SHA512 2d901da70888b304c02593ce1f521820e3f34cf30ce38a096baae8b5b8b6d687812334692e2048032e236e070259d2415c3d118fdc078956631da94e477f6dc6
- SSDEEP 393216:GLHLLmwqr44p87VZkmcP1NJsv6tWKFdu9C:GLrLmwqrny7A1
- TLSH T1BFD6D052EB8280B1D497347211BF622BC7776BB18B2401CBB78C6E665B70AD1ED32747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.