General
- Target 2026-09-30_395d62abdf2ac403bd03a0fd8bab129a_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.9MB
- Sample260930-phd1rsxanf
- SHA256 5e0bbc1b97873f4c7e550b39be91208eb9023cba4544206ec0c5f13308ade779
- MD5 395d62abdf2ac403bd03a0fd8bab129a
- SHA1 536bdb16ec7feab4aa3b35ebaa40f4c162e68830
- SHA512 0d8ade85f2088683ba26a52b8c985fda6a19fe28b82a485dca66bee53f740c02dc54a837c530feff0bba3e9e7f83cf2fd1759c81026bbbfe64b80de4966ecf7e
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2VjnmBI:nIcRGBfW1GBfW1pVVGnb
- TLSH T12C866C0273E58072D0B26670857A97659376BE701F32D7DF66887A1E7E33BC08932366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_395d62abdf2ac403bd03a0fd8bab129a_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthy.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_395d62abdf2ac403bd03a0fd8bab129a_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.9MB
- SHA256 5e0bbc1b97873f4c7e550b39be91208eb9023cba4544206ec0c5f13308ade779
- MD5 395d62abdf2ac403bd03a0fd8bab129a
- SHA1 536bdb16ec7feab4aa3b35ebaa40f4c162e68830
- SHA512 0d8ade85f2088683ba26a52b8c985fda6a19fe28b82a485dca66bee53f740c02dc54a837c530feff0bba3e9e7f83cf2fd1759c81026bbbfe64b80de4966ecf7e
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2VjnmBI:nIcRGBfW1GBfW1pVVGnb
- TLSH T12C866C0273E58072D0B26670857A97659376BE701F32D7DF66887A1E7E33BC08932366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1