General
- Target 2026-08-17_4ded97f3fe1ce74e48484834cb676b3c_amadey_darkgate_elex_gazer_glassworm_graftor_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- Sample260817-g9f1fafm2s
- SHA256 bbb2acfd426322f487acdd3a596d3a136782e17c3324e15c1f91deb34fd9dfc1
- MD5 4ded97f3fe1ce74e48484834cb676b3c
- SHA1 12d197434ab48910e5c574369e3fdb839ad419a7
- SHA512 3ff539bfde2b791d900ea36916f7171e78e2fb1d4691b275b8dbf6fe8561982e8976b4e59021253042e3577bf6c577637b6d2cb64e4dc151b13156c2b82e858e
- SSDEEP 393216:BOeEVweeainptjrUcjUVGKSwsrU//3mtdZtJ6qwXj3sssKB8:7GwLDI1B
- TLSH T195E64B02F67081B5E4B2407486775637BA717D205724CBCBAB80EE5A5F32BE0AD3935B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-17_4ded97f3fe1ce74e48484834cb676b3c_amadey_darkgate_elex_gazer_glassworm_graftor_manuscrypt_.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_4ded97f3fe1ce74e48484834cb676b3c_amadey_darkgate_elex_gazer_glassworm_graftor_manuscrypt_.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_4ded97f3fe1ce74e48484834cb676b3c_amadey_darkgate_elex_gazer_glassworm_graftor_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 13.6MB
- SHA256 bbb2acfd426322f487acdd3a596d3a136782e17c3324e15c1f91deb34fd9dfc1
- MD5 4ded97f3fe1ce74e48484834cb676b3c
- SHA1 12d197434ab48910e5c574369e3fdb839ad419a7
- SHA512 3ff539bfde2b791d900ea36916f7171e78e2fb1d4691b275b8dbf6fe8561982e8976b4e59021253042e3577bf6c577637b6d2cb64e4dc151b13156c2b82e858e
- SSDEEP 393216:BOeEVweeainptjrUcjUVGKSwsrU//3mtdZtJ6qwXj3sssKB8:7GwLDI1B
- TLSH T195E64B02F67081B5E4B2407486775637BA717D205724CBCBAB80EE5A5F32BE0AD3935B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10- Custom signature
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)