General
- Target 2026-09-13_2cdc8f06bf41468518d3bd6978edabd1_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- Sample260913-t7v3ssan71
- SHA256 2fb516758d5cf57eef77bd9487f2154ddbd6cd019d73b485897b1832340ba7cd
- MD5 2cdc8f06bf41468518d3bd6978edabd1
- SHA1 78d4d4a931d2cccdf1d7869ff1bd7501892b0805
- SHA512 80a26726d3466359252c6f03d9feb2bc3b01d77350ccd7cb02ecc88c4efdc2a668f1294077637b24b39d808b0d93ae8f4191a5c9fd9a90ce06ec2c8c191ab523
- SSDEEP 24576:0mewsAj625Km1ddLQEyJUQL+Eoy3UOx3UvLD8Ta:/lj66dDyJUU+FdOle8e
- TLSH T16D15E031FA75E432C3BF0DB61B76D716147D79204F611AC3E3A88E9E49202D267B2A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_2cdc8f06bf41468518d3bd6978edabd1_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_2cdc8f06bf41468518d3bd6978edabd1_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 928KB
- SHA256 2fb516758d5cf57eef77bd9487f2154ddbd6cd019d73b485897b1832340ba7cd
- MD5 2cdc8f06bf41468518d3bd6978edabd1
- SHA1 78d4d4a931d2cccdf1d7869ff1bd7501892b0805
- SHA512 80a26726d3466359252c6f03d9feb2bc3b01d77350ccd7cb02ecc88c4efdc2a668f1294077637b24b39d808b0d93ae8f4191a5c9fd9a90ce06ec2c8c191ab523
- SSDEEP 24576:0mewsAj625Km1ddLQEyJUQL+Eoy3UOx3UvLD8Ta:/lj66dDyJUU+FdOle8e
- TLSH T16D15E031FA75E432C3BF0DB61B76D716147D79204F611AC3E3A88E9E49202D267B2A17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1