Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/10/2026, 00:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_b187faa5a4e617e3ba8ea7b6994c33db_amadey_chir_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_b187faa5a4e617e3ba8ea7b6994c33db_amadey_chir_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_b187faa5a4e617e3ba8ea7b6994c33db_amadey_chir_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_b187faa5a4e617e3ba8ea7b6994c33db_amadey_chir_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-22_b187faa5a4e617e3ba8ea7b6994c33db_amadey_chir_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop.exe
- Size 2.7MB
- Sample261024-agf2eaws2n
- SHA256 ea6647f446e00fda493712cd6c157dc5e231a0b1ea1b31a6a0d3e9d568e4c360
- MD5 b187faa5a4e617e3ba8ea7b6994c33db
- SHA1 0f66b25c91d5ef293a4a95d3b48c5339f8c648a0
- SHA512 d2ecb7507858c9d114b320da9bb8efeb0b7921ff01dc10487c863dcf0e3c4d52df9dd719df352be96f825d59a571809aaa222ff586402eacadb950329e471f5c
- SSDEEP 49152:OKvLuHkocMXiALASlR6aokCabUNxQEeHNLBIZQWO+4QC7j8UjvcBrWNt1mi3gM5D:poccR6aUaOTetLBIZ9XhC7AULqrWNt
- TLSH T1EED58D103BC5C079D227267641ABA36B76AAAA70173485C7A5903E3E3D705C2BC3D76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10