2026-08-24_c66dbe5464de47ec70b23ec356ba79ef_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_c66dbe5464de47ec70b23ec356ba79ef_amadey_darkgate_elex_glassworm_smoke-loader
Size 6.3MB
Sample260825-b2ff2sdq5w
SHA256 1b2588f1177ac3207dc3597dffa5a125834488f60d6309ebcadb4176c1ea1608
MD5 c66dbe5464de47ec70b23ec356ba79ef
SHA1 b35ca47542261366a8445b71ee5af5534a842512
SHA512 2f67f9258de6d1ccc341c85f33fd5b887de265a3719ad8c8e614412a3410487b72b7d3802ff6d67b66b54c0987821148366938064d8e3bdae09577827457fe3c
SSDEEP 98304:oFEQl3Z2x4HtRcm7keSrSOrUfd9SWkt6XwridnLYZ0Z+R30DGqRKsTkF:oFEG2xfAkeSu2KDSjYLZ+J4GqRw
TLSH
T136661213B1A3D076F4A148BB463F6FF2633D55329F0298FBB69821CA15311D2B63179A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_c66dbe5464de47ec70b23ec356ba79ef_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-08-24_c66dbe5464de47ec70b23ec356ba79ef_amadey_darkgate_elex_glassworm_smoke-loader

.exe 6.3MB

2026-08-24_c66dbe5464de47ec70b23ec356ba79ef_amadey_darkgate_elex_glassworm_smoke-loader

SHA256 1b2588f1177ac3207dc3597dffa5a125834488f60d6309ebcadb4176c1ea1608
MD5 c66dbe5464de47ec70b23ec356ba79ef
SHA1 b35ca47542261366a8445b71ee5af5534a842512
SHA512 2f67f9258de6d1ccc341c85f33fd5b887de265a3719ad8c8e614412a3410487b72b7d3802ff6d67b66b54c0987821148366938064d8e3bdae09577827457fe3c
SSDEEP 98304:oFEQl3Z2x4HtRcm7keSrSOrUfd9SWkt6XwridnLYZ0Z+R30DGqRKsTkF:oFEG2xfAkeSu2KDSjYLZ+J4GqRw
TLSH
T136661213B1A3D076F4A148BB463F6FF2633D55329F0298FBB69821CA15311D2B63179A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

60755492

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

9.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

445KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

16.5MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

1.0MB

Virtual Size

26.3MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

1024KB

Virtual Size

11.4MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=5, id=12, version=7291,

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=49, id=14, version=7299,

count=44, id=19, version=8022,

count=1, id=28, version=9178,

count=6, id=18, version=8444,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=24, id=19, version=8034,

count=685, id=1, productName=Unmarked objects,

count=2, id=93, version=2179,

count=2, id=49, version=9044,

count=97, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=235, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=95, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=27, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=303, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,