General

  • Target
    2026-09-29_c380ae0819e67c0178500894e5359acd_amadey_darkgate_elex_gcleaner_glassworm_manuscrypt_rhadamanthys_smoke-loader_stop
  • Size 5.5MB
  • Sample260930-vbdpbascna
  • SHA256 bf817e93b1676c8c5f9dfc5885c9af3730c99997ecbd9c7b00153df38972ff18
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-09-29_c380ae0819e67c0178500894e5359acd_amadey_darkgate_elex_gcleaner_glassworm_manuscrypt_rhadamanthys_smoke-loader_stop
    .exe 5.5MB

2026-09-29_c380ae0819e67c0178500894e5359acd_amadey_darkgate_elex_gcleaner_glassworm_manuscrypt_rhadamanthys_smoke-loader_stop

  • IMPHASH e05eed3a51803f8d722466f73aa1b4e7
  • SHA256 bf817e93b1676c8c5f9dfc5885c9af3730c99997ecbd9c7b00153df38972ff18
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ed:b5:82:9a:f4:af:e5:27:ae:5c:ab:7d:0d:d0:c9:a5:6e:ff:85:01:4a:7d:38:ad:dd:da:3a:d4:0e:c9:1e:39
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=68 643 065 114,CN=Winthrop Development Consultants Pty Ltd,O=Winthrop Development Consultants Pty Ltd,POSTALCODE=6150,STREET=52 Sutherland Crescent,L=Winthrop,ST=Western Australia,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155
Digest
a1:05:61:4f:af:c1:84:ab:ad:cc:67:93:2a:3d:4f:63:86:f7:8c:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=68 643 065 114,CN=Winthrop Development Consultants Pty Ltd,O=Winthrop Development Consultants Pty Ltd,POSTALCODE=6150,STREET=52 Sutherland Crescent,L=Winthrop,ST=Western Australia,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155
Minor OS version
0
Major OS version
5
Entry point
3897996
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths