General
- Target 2026-10-16_f2420363e9c47c9e6100137ca3213f4d_amadey_darkgate_elex_gcleaner_glassworm_helldown_redline-stealer_rhadamanthys_stealc_stop_vidar
- Size 10.0MB
- Sample261017-dbd7ea1v6l
- SHA256 8039c5917d67213465ae6f8393d842c6cb3e1bc121b2e53baf5ba0f7f1888447
- MD5 f2420363e9c47c9e6100137ca3213f4d
- SHA1 5d7382d5fe45363a109e4f1033e2d9d8f0e500ba
- SHA512 02931a4b48f8aa7c73c52318ff76b4d5c86a7299265b9ec8c2a741a6e71a624521c6d1e575290e98b5de093f7a8d302cfae27114d68673f8547acb01a8c9f34d
- SSDEEP 98304:65Od3bTwUbegcTfXp6f/9zktht5iu4I7Iz3MQPn9sErpXdR1nEeQgaXLDvgD:2QrsUbxc8lktht5iu4a64Xk
- TLSH T14BB69E2BF6658178C0AAC175C1A3E722EA3334611731CAE742D4CA7DAF57AE45E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-16_f2420363e9c47c9e6100137ca3213f4d_amadey_darkgate_elex_gcleaner_glassworm_helldown_redline.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_f2420363e9c47c9e6100137ca3213f4d_amadey_darkgate_elex_gcleaner_glassworm_helldown_redline-stealer_rhadamanthys_stealc_stop_vidar
- Size 10.0MB
- SHA256 8039c5917d67213465ae6f8393d842c6cb3e1bc121b2e53baf5ba0f7f1888447
- MD5 f2420363e9c47c9e6100137ca3213f4d
- SHA1 5d7382d5fe45363a109e4f1033e2d9d8f0e500ba
- SHA512 02931a4b48f8aa7c73c52318ff76b4d5c86a7299265b9ec8c2a741a6e71a624521c6d1e575290e98b5de093f7a8d302cfae27114d68673f8547acb01a8c9f34d
- SSDEEP 98304:65Od3bTwUbegcTfXp6f/9zktht5iu4I7Iz3MQPn9sErpXdR1nEeQgaXLDvgD:2QrsUbxc8lktht5iu4a64Xk
- TLSH T14BB69E2BF6658178C0AAC175C1A3E722EA3334611731CAE742D4CA7DAF57AE45E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.