2026-09-29_db4a114ad71cb9be2edd925bb724bd76_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_smoke-loader_stop

General

Target
2026-09-29_db4a114ad71cb9be2edd925bb724bd76_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_smoke-loader_stop
Size 3.5MB
Sample260930-tk815swvev
SHA256 5304f6ebf6b7124a5c4ac20efc302e7eda14787c70a23bcf319aeaf99c5b97fc
MD5 db4a114ad71cb9be2edd925bb724bd76
SHA1 98d885121b22c3a8ee8f47e59545448090c8c6a6
SHA512 d9ecd640b9b7188fdb077c65543f37c3e9fb213dbd7312a28167e5c378d2af98c0b20576d7a2173b6b29c237b1d94ff83d8cb7cf0aaabc2c3ec1cf216e725a15
SSDEEP 98304:hAOIfe+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87a1:+XmAS
TLSH
T1E5F5E61DEEEE9E32CC7505308F7DD75C02246C509A92CE5632507A9DEAB2F48B91F623
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_db4a114ad71cb9be2edd925bb724bd76_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-29_db4a114ad71cb9be2edd925bb724bd76_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_smoke-loader_stop

.exe 3.5MB

2026-09-29_db4a114ad71cb9be2edd925bb724bd76_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_smoke-loader_stop

IMPHASH 75e7fb7458b2e2dd8c3b4d1f0020fc10
SHA256 5304f6ebf6b7124a5c4ac20efc302e7eda14787c70a23bcf319aeaf99c5b97fc
MD5 db4a114ad71cb9be2edd925bb724bd76
SHA1 98d885121b22c3a8ee8f47e59545448090c8c6a6
SHA512 d9ecd640b9b7188fdb077c65543f37c3e9fb213dbd7312a28167e5c378d2af98c0b20576d7a2173b6b29c237b1d94ff83d8cb7cf0aaabc2c3ec1cf216e725a15
SSDEEP 98304:hAOIfe+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87a1:+XmAS
TLSH
T1E5F5E61DEEEE9E32CC7505308F7DD75C02246C509A92CE5632507A9DEAB2F48B91F623
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9451

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\browser\app\firefox.pdb

kernel32

GetEnvironmentVariableW GetProcessIoCounters FreeLibrary SetDllDirectoryW VerSetConditionMask GetCurrentProcess SetEnvironmentVariableW GetModuleHandleW WideCharToMultiByte LoadLibraryW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx GetModuleHandleA LoadLibraryExA ExpandEnvironmentStringsW LoadLibraryExW SetFilePointerEx ReadFile CreateFileW CloseHandle IsDebuggerPresent RaiseException GetLastError GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize RtlUnwind HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree HeapAlloc SetStdHandle OutputDebugStringW GetStringTypeW CompareStringW LCMapStringW GetConsoleCP GetConsoleMode HeapReAlloc SetEnvironmentVariableA ReadConsoleW FlushFileBuffers WriteConsoleW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_db4a114ad71cb9be2edd925bb724bd76_cloudeye_darkgate_elex_glassworm_maze_rhadamanthys_smoke-loader_stop

kernel32

generic