General
- Target 2026-09-04_0f1c1e4f0283b0ccfa6220d056f522a3_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260905-w26cpaxtey
- SHA256 a89d1f73b1d941a1cd49a8395b19083dc89a6565633df35f94607c6afe722fff
- MD5 0f1c1e4f0283b0ccfa6220d056f522a3
- SHA1 3595798e2bba52415911ba3d7d72e996ad02e18f
- SHA512 cc883a0bf9329c39db7370b8d21201d6a48b81f56c9ea6e88de36faa5f709d4527003f8688185e696d2c181a6d5f1868140a6cf0eca7cfcee9613449e3153c68
- SSDEEP 12288:AGwSfxL/2Dc3bDLLmt0LDQewsAjGlBJxzEOwePRDFDPKOsflH/7jX4/rYuMowqWj:LmewsAjGBdEOjLKJgjBMyeEpat
- TLSH T1F915E031FA75E432D27B0DB61B26D706147CBA204B6219C3E3AC8E9D59702D22776F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0f1c1e4f0283b0ccfa6220d056f522a3_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_0f1c1e4f0283b0ccfa6220d056f522a3_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 a89d1f73b1d941a1cd49a8395b19083dc89a6565633df35f94607c6afe722fff
- MD5 0f1c1e4f0283b0ccfa6220d056f522a3
- SHA1 3595798e2bba52415911ba3d7d72e996ad02e18f
- SHA512 cc883a0bf9329c39db7370b8d21201d6a48b81f56c9ea6e88de36faa5f709d4527003f8688185e696d2c181a6d5f1868140a6cf0eca7cfcee9613449e3153c68
- SSDEEP 12288:AGwSfxL/2Dc3bDLLmt0LDQewsAjGlBJxzEOwePRDFDPKOsflH/7jX4/rYuMowqWj:LmewsAjGBdEOjLKJgjBMyeEpat
- TLSH T1F915E031FA75E432D27B0DB61B26D706147CBA204B6219C3E3AC8E9D59702D22776F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1