General
- Target 2026-08-20_dfc91d2cccac96f6bc1f836887620766_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_vidar_wannacry
- Size 4.5MB
- Sample260820-rnaxeayeke
- SHA256 4ed56ca806f76d56edf6bf1fd51653c2faaff4cae793698710072557aa83fa5f
- MD5 dfc91d2cccac96f6bc1f836887620766
- SHA1 b30f2df533964cad15e3f914797119e93e10f445
- SHA512 c5eb27d433aadbc10875f525bd9f3551be57b4449a80fadcf9823218dfe5c5b5fd98673b3007227281a4cd6e0bebf4d2dcd43912ada7f45116e4dd16ad50c1b6
- SSDEEP 98304:gkJnBd+GAJIlX/tNsaO7OtUpc0H0J895Nv55:gkJnBZAJIlX/kVoJ8jp
- TLSH T1BC267CA7FB4488ACD15244F4924FC915A370B8321B1296D7B5C8AF5A2F3A7F25A3D307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_dfc91d2cccac96f6bc1f836887620766_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_dfc91d2cccac96f6bc1f836887620766_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_dfc91d2cccac96f6bc1f836887620766_amadey_darkgate_elex_gcleaner_glassworm_smoke-loader_vidar_wannacry
- Size 4.5MB
- SHA256 4ed56ca806f76d56edf6bf1fd51653c2faaff4cae793698710072557aa83fa5f
- MD5 dfc91d2cccac96f6bc1f836887620766
- SHA1 b30f2df533964cad15e3f914797119e93e10f445
- SHA512 c5eb27d433aadbc10875f525bd9f3551be57b4449a80fadcf9823218dfe5c5b5fd98673b3007227281a4cd6e0bebf4d2dcd43912ada7f45116e4dd16ad50c1b6
- SSDEEP 98304:gkJnBd+GAJIlX/tNsaO7OtUpc0H0J895Nv55:gkJnBZAJIlX/kVoJ8jp
- TLSH T1BC267CA7FB4488ACD15244F4924FC915A370B8321B1296D7B5C8AF5A2F3A7F25A3D307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with Enigma
-
Detects packed executables observed in Molerats
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory