General
- Target 2026-09-30_a072c8bcdd3db8bbe0552f927d66c82d_amadey_darkgate_elex_emotet_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 9.8MB
- Sample260930-k3f9eavdqa
- SHA256 d7da82ec584ee1080d987ccc9a331b358898bb84a1115101281fdd5a975e7436
- MD5 a072c8bcdd3db8bbe0552f927d66c82d
- SHA1 5b8021c2dd8bbd8df36e0d3a0e6574aae6a0b2fb
- SHA512 dda164723300a8d2a3e59e589e78f1eee11d7388f3a87054b486bdbbe4124f961ae0faa8dd260897b6b19f365aca5f543b859e9aef78bea6f73957dffa48586b
- SSDEEP 196608:nIcRGBfW1GBfW1pV6111qfi1qfQJn1qf0EGnF:nIBWCWo11QfiQfQNQftGF
- TLSH T14EA67C02B3A48071E4F66278457AA731A376BC201F31D7DF53847A5E6EB2BC09E35366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_a072c8bcdd3db8bbe0552f927d66c82d_amadey_darkgate_elex_emotet_glassworm_nymaim_ramnit_rhad.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_a072c8bcdd3db8bbe0552f927d66c82d_amadey_darkgate_elex_emotet_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 9.8MB
- SHA256 d7da82ec584ee1080d987ccc9a331b358898bb84a1115101281fdd5a975e7436
- MD5 a072c8bcdd3db8bbe0552f927d66c82d
- SHA1 5b8021c2dd8bbd8df36e0d3a0e6574aae6a0b2fb
- SHA512 dda164723300a8d2a3e59e589e78f1eee11d7388f3a87054b486bdbbe4124f961ae0faa8dd260897b6b19f365aca5f543b859e9aef78bea6f73957dffa48586b
- SSDEEP 196608:nIcRGBfW1GBfW1pV6111qfi1qfQJn1qf0EGnF:nIBWCWo11QfiQfQNQftGF
- TLSH T14EA67C02B3A48071E4F66278457AA731A376BC201F31D7DF53847A5E6EB2BC09E35366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1