General
- Target 2026-10-02_645a06f971ce73c5e15d6bfebe1a2553_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 715KB
- Sample261003-nd92zaxbpg
- SHA256 1d6cf149ccbabf43f47a04e57705522118dc43d6cf5a3c67cd243f19358ff460
- MD5 645a06f971ce73c5e15d6bfebe1a2553
- SHA1 4970f071f4c58c1192f70c03fb6fad64b5c6a2b0
- SHA512 fac3f333a623a83739768bfa5c5752532741ef77b8f7a1d9cefd1651f82058cb25f71efd6a9d9f44ab259b7389de94f1382be40dcab98dfac85b08fbcec46c6d
- SSDEEP 12288:9N2r30q8Ho6vXgU5BjR1+KVTmwqaiNdBRXjIjGU:9S3nBU5BjhVTjGNTRu
- TLSH T1C9F46D2237E4E031E2724B346F6BD2655676BC319870894FB7D43F3D2E706C29A25B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_645a06f971ce73c5e15d6bfebe1a2553_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_645a06f971ce73c5e15d6bfebe1a2553_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_645a06f971ce73c5e15d6bfebe1a2553_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop
- Size 715KB
- SHA256 1d6cf149ccbabf43f47a04e57705522118dc43d6cf5a3c67cd243f19358ff460
- MD5 645a06f971ce73c5e15d6bfebe1a2553
- SHA1 4970f071f4c58c1192f70c03fb6fad64b5c6a2b0
- SHA512 fac3f333a623a83739768bfa5c5752532741ef77b8f7a1d9cefd1651f82058cb25f71efd6a9d9f44ab259b7389de94f1382be40dcab98dfac85b08fbcec46c6d
- SSDEEP 12288:9N2r30q8Ho6vXgU5BjR1+KVTmwqaiNdBRXjIjGU:9S3nBU5BjhVTjGNTRu
- TLSH T1C9F46D2237E4E031E2724B346F6BD2655676BC319870894FB7D43F3D2E706C29A25B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.