General
- Target 2026-10-11_41898a20d4c7ec74c44a8c1e92558f2f_amadey_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop
- Size 10.8MB
- Sample261012-3ea2laswhy
- SHA256 fa8e1d7583083fbc4d2d91bc7942753beaa7758082a5622fbad81e74fb649c40
- MD5 41898a20d4c7ec74c44a8c1e92558f2f
- SHA1 af3084945a1bdbae199d9ffff24c775be767c315
- SHA512 5f704a12ec1208f354e92e563920d0c6d83b60657836f1ba3f1138b3d5c7cdbfbab8fdecfcddd83f534e0ff2c1ad12ccfa2fd1dea413ad5750252e60b0b1c764
- SSDEEP 196608:STtCuJVgrM/C0/VVdg8lTyHfHsbCUX9N0JyAY6yHmJ6kuG:4wrM/C0NV6uIHhaL8X
- TLSH T1A0B60202B691C0B6D1954931847B7BF6F6B59E26CF118DE3A368FEA93C331D0A237146
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-11_41898a20d4c7ec74c44a8c1e92558f2f_amadey_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_41898a20d4c7ec74c44a8c1e92558f2f_amadey_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_41898a20d4c7ec74c44a8c1e92558f2f_amadey_darkgate_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop
- Size 10.8MB
- SHA256 fa8e1d7583083fbc4d2d91bc7942753beaa7758082a5622fbad81e74fb649c40
- MD5 41898a20d4c7ec74c44a8c1e92558f2f
- SHA1 af3084945a1bdbae199d9ffff24c775be767c315
- SHA512 5f704a12ec1208f354e92e563920d0c6d83b60657836f1ba3f1138b3d5c7cdbfbab8fdecfcddd83f534e0ff2c1ad12ccfa2fd1dea413ad5750252e60b0b1c764
- SSDEEP 196608:STtCuJVgrM/C0/VVdg8lTyHfHsbCUX9N0JyAY6yHmJ6kuG:4wrM/C0NV6uIHhaL8X
- TLSH T1A0B60202B691C0B6D1954931847B7BF6F6B59E26CF118DE3A368FEA93C331D0A237146
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger