General
- Target 2026-08-20_16c5d182a7ea12bc42723af100aca335_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample260820-tee6waed25
- SHA256 13b8f24de71f61c11b19e4760d93c5312d0de798ad38503a70db6c88b5489847
- MD5 16c5d182a7ea12bc42723af100aca335
- SHA1 a222289c7efee102d71898b2cb6ea9c85343627d
- SHA512 f51bc3b96d853d7f85fb859db8dedd105d07196b1d501930113119caa3479df8c122934f0a73587845a0c10cb797fa4e18fff5d272c4f616b8512deb1b4005e5
- SSDEEP 12288:fAwSfxL/2Dc3bDLLmt0LDQewsAjSxeGeDLdcY2XPXxvB4mn/l5SmAGbzLHucc/3Y:omewsAjY9ePSfPFB9nLSb6LOD/f/o
- TLSH T1D115E031FB74E036C3BB0DB61B3AD31A143DB9604B6119C7E3A84D9E59342D26376A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_16c5d182a7ea12bc42723af100aca335_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_16c5d182a7ea12bc42723af100aca335_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 13b8f24de71f61c11b19e4760d93c5312d0de798ad38503a70db6c88b5489847
- MD5 16c5d182a7ea12bc42723af100aca335
- SHA1 a222289c7efee102d71898b2cb6ea9c85343627d
- SHA512 f51bc3b96d853d7f85fb859db8dedd105d07196b1d501930113119caa3479df8c122934f0a73587845a0c10cb797fa4e18fff5d272c4f616b8512deb1b4005e5
- SSDEEP 12288:fAwSfxL/2Dc3bDLLmt0LDQewsAjSxeGeDLdcY2XPXxvB4mn/l5SmAGbzLHucc/3Y:omewsAjY9ePSfPFB9nLSb6LOD/f/o
- TLSH T1D115E031FB74E036C3BB0DB61B3AD31A143DB9604B6119C7E3A84D9E59342D26376A27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1