General
- Target 2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry
- Size 8.3MB
- Sample260930-q2n6hszzet
- SHA256 c0f9791172e1a7ce5a91a040723395ffe24eb015068d8bd617121f47ed655852
- MD5 152db19d44829696197d5055a73e22eb
- SHA1 7c1c5c735a8a75440539ac776ac1e82479d8b91f
- SHA512 046511355f46269a888303828dad83098b7748cc39f95cb5a327046fe0ea643e4ba508d456dcfccbfb009a5a0f7ca1f7ee31077ff6bbf576f535c57ab24ee77a
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2VjnmhW1Psz2:nIcRGBfW1GBfW1pVVGnFxsi
- TLSH T193967C0263E58072E1F26670857A97649736BE701F31D6EF6688791F7E33BC08932366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry
- Size 8.3MB
- SHA256 c0f9791172e1a7ce5a91a040723395ffe24eb015068d8bd617121f47ed655852
- MD5 152db19d44829696197d5055a73e22eb
- SHA1 7c1c5c735a8a75440539ac776ac1e82479d8b91f
- SHA512 046511355f46269a888303828dad83098b7748cc39f95cb5a327046fe0ea643e4ba508d456dcfccbfb009a5a0f7ca1f7ee31077ff6bbf576f535c57ab24ee77a
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2VjnmhW1Psz2:nIcRGBfW1GBfW1pVVGnFxsi
- TLSH T193967C0263E58072E1F26670857A97649736BE701F31D6EF6688791F7E33BC08932366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1