General
- Target 2026-09-29_59cf14e49a1d6d1a9e0576a47049698e_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 2.9MB
- Sample260930-arjv2stbpb
- SHA256 181ba03f62845685d25e17b8a8dbd3339c9d691df33de43117b3bba7e8ec437b
- MD5 59cf14e49a1d6d1a9e0576a47049698e
- SHA1 98d870898462487d8cbaaa5e9b0fc48619d4603b
- SHA512 966617bee0d115dd670d39bbd7e6e16e12da6474979503031760fb3fb3f497a2740af9b40dbc182117842d533ef21d17d26e78309a5343ce26d768ef23723e40
- SSDEEP 49152:IWSytLoqUpM84pQc9IW1dXgfC/MHmgHakOElMaFLkjcY/+:IstsFefQc9IW1dXgfC/MHmgHak7/7
- TLSH T128D504C1B5D39837C89452704A40EA5835267FD095273DABF2857E8FF7BD2A16E0E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_59cf14e49a1d6d1a9e0576a47049698e_amadey_darkgate_elex_glassworm_redline-stealer_rhadamant.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_59cf14e49a1d6d1a9e0576a47049698e_amadey_darkgate_elex_glassworm_redline-stealer_rhadamant.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_59cf14e49a1d6d1a9e0576a47049698e_amadey_darkgate_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 2.9MB
- SHA256 181ba03f62845685d25e17b8a8dbd3339c9d691df33de43117b3bba7e8ec437b
- MD5 59cf14e49a1d6d1a9e0576a47049698e
- SHA1 98d870898462487d8cbaaa5e9b0fc48619d4603b
- SHA512 966617bee0d115dd670d39bbd7e6e16e12da6474979503031760fb3fb3f497a2740af9b40dbc182117842d533ef21d17d26e78309a5343ce26d768ef23723e40
- SSDEEP 49152:IWSytLoqUpM84pQc9IW1dXgfC/MHmgHakOElMaFLkjcY/+:IstsFefQc9IW1dXgfC/MHmgHak7/7
- TLSH T128D504C1B5D39837C89452704A40EA5835267FD095273DABF2857E8FF7BD2A16E0E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.