General
- Target 2026-10-05_72aba798799061b9633d6626447fc207_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- Sample261006-1snthaws7n
- SHA256 a8301679e810c155b871d4dcbec827de7814bb793a1da85294c1baba8e3da387
- MD5 72aba798799061b9633d6626447fc207
- SHA1 b08f93a905ef7d63cb9df89a02d5e36e8ef25699
- SHA512 46c829160c07756bd89eacefed3bd17b7db9f12124d8ab2b3806d2849e71a1d527108f5c227a743a92e2ee756f14ef551b96c5e34f19f897b041787228e84d4d
- SSDEEP 24576:HmewsAj2chr2eB7pszrYnQeqK0sgoAP3f3:GljN2g7pszrYQf2g93
- TLSH T1FE15E031FA74D032C7BF0D761B26C306687DB9214B611AC3F3E89D9E99202D26376A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-05_72aba798799061b9633d6626447fc207_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-05_72aba798799061b9633d6626447fc207_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader
- Size 932KB
- SHA256 a8301679e810c155b871d4dcbec827de7814bb793a1da85294c1baba8e3da387
- MD5 72aba798799061b9633d6626447fc207
- SHA1 b08f93a905ef7d63cb9df89a02d5e36e8ef25699
- SHA512 46c829160c07756bd89eacefed3bd17b7db9f12124d8ab2b3806d2849e71a1d527108f5c227a743a92e2ee756f14ef551b96c5e34f19f897b041787228e84d4d
- SSDEEP 24576:HmewsAj2chr2eB7pszrYnQeqK0sgoAP3f3:GljN2g7pszrYQf2g93
- TLSH T1FE15E031FA74D032C7BF0D761B26C306687DB9214B611AC3F3E89D9E99202D26376A17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1