2026-08-27_b74a427095c8fb7192ba496095c78afd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar

General

Target
2026-08-27_b74a427095c8fb7192ba496095c78afd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar
Size 1.6MB
Sample260827-ly2j8a1xev
SHA256 a8c7bf8d2279dffcce69f4de65e42d2355a4ec23b2d95e6689993b8d18dac319
MD5 b74a427095c8fb7192ba496095c78afd
SHA1 3e1353ab447144c087dbfb65ea9443dfea6c6ccf
SHA512 00a59409d750bf6221a0aa888fe22871044b338bda60aa7058d5b4eef75de65bf91af7cfdcf18f5d49e2cb25107ffe1a1bcd00005b1bacd590b04121de1767ac
SSDEEP 12288:c9Hg3A+JFo8PT5vilAwSfxL/2Dc3jDLLmt0LDQewsAjREoLUeDuUlIx6x81gL5pv:QHg3nFoAAGaewsAju0UG/5jcAkSYqyE
TLSH
T1FA753911B7B48171D0B285748AA2964EDA317811CB238FCF52849EEDBFE27D19E35732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-27_b74a427095c8fb7192ba496095c78afd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar

2026-08-27_b74a427095c8fb7192ba496095c78afd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar

.exe 1.6MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 a8c7bf8d2279dffcce69f4de65e42d2355a4ec23b2d95e6689993b8d18dac319
MD5 b74a427095c8fb7192ba496095c78afd
SHA1 3e1353ab447144c087dbfb65ea9443dfea6c6ccf
SHA512 00a59409d750bf6221a0aa888fe22871044b338bda60aa7058d5b4eef75de65bf91af7cfdcf18f5d49e2cb25107ffe1a1bcd00005b1bacd590b04121de1767ac
SSDEEP 12288:c9Hg3A+JFo8PT5vilAwSfxL/2Dc3jDLLmt0LDQewsAjREoLUeDuUlIx6x81gL5pv:QHg3nFoAAGaewsAju0UG/5jcAkSYqyE
TLSH
T1FA753911B7B48171D0B285748AA2964EDA317811CB238FCF52849EEDBFE27D19E35732
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths