General
- Target 2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry
- Size 8.5MB
- Sample260930-nwmdmavckd
- SHA256 cb8298339c491ef49c65d784ec19c736a8dc69bd55ab6d60c685c99a9514b52b
- MD5 488b9d0444769bdf1c0b4bbd9d2891c4
- SHA1 4e41b1a54768e9c82def4ebc6dd993f138345f51
- SHA512 99cf056236a3022ebfd90836f257734e14c8f0d90f6f0ca26528139e3035be4ad0c22b282132c9392aefffc97903e2e20ffa36b6e529757e049b531830e41efe
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2Vjnm3tY:nIcRGBfW1GBfW1pVVGnKO
- TLSH T19F967C0273E58076E0B26670857A97659332BD701F32D6EF66947A1E7E33BC08D36362
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthy.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry
- Size 8.5MB
- SHA256 cb8298339c491ef49c65d784ec19c736a8dc69bd55ab6d60c685c99a9514b52b
- MD5 488b9d0444769bdf1c0b4bbd9d2891c4
- SHA1 4e41b1a54768e9c82def4ebc6dd993f138345f51
- SHA512 99cf056236a3022ebfd90836f257734e14c8f0d90f6f0ca26528139e3035be4ad0c22b282132c9392aefffc97903e2e20ffa36b6e529757e049b531830e41efe
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2Vjnm3tY:nIcRGBfW1GBfW1pVVGnKO
- TLSH T19F967C0273E58076E0B26670857A97659332BD701F32D6EF66947A1E7E33BC08D36362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1