2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry

General

Target
2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry
Size 8.3MB
Sample260930-q2n6hszzet
SHA256 c0f9791172e1a7ce5a91a040723395ffe24eb015068d8bd617121f47ed655852
MD5 152db19d44829696197d5055a73e22eb
SHA1 7c1c5c735a8a75440539ac776ac1e82479d8b91f
SHA512 046511355f46269a888303828dad83098b7748cc39f95cb5a327046fe0ea643e4ba508d456dcfccbfb009a5a0f7ca1f7ee31077ff6bbf576f535c57ab24ee77a
SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2VjnmhW1Psz2:nIcRGBfW1GBfW1pVVGnFxsi
TLSH
T193967C0263E58072E1F26670857A97649736BE701F31D6EF6688791F7E33BC08932366
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry

2026-09-30_152db19d44829696197d5055a73e22eb_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_wannacry

.exe 8.3MB

IMPHASH ed86c2ba483c37b0e2cfeecbd5fca876
SHA256 c0f9791172e1a7ce5a91a040723395ffe24eb015068d8bd617121f47ed655852
MD5 152db19d44829696197d5055a73e22eb
SHA1 7c1c5c735a8a75440539ac776ac1e82479d8b91f
SHA512 046511355f46269a888303828dad83098b7748cc39f95cb5a327046fe0ea643e4ba508d456dcfccbfb009a5a0f7ca1f7ee31077ff6bbf576f535c57ab24ee77a
SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2VjnmhW1Psz2:nIcRGBfW1GBfW1pVVGnFxsi
TLSH
T193967C0263E58072E1F26670857A97649736BE701F31D6EF6688791F7E33BC08932366
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths