General
- Target 2026-10-25_c3e40d9d3810de25e7257f1cb97acec8_amadey_darkgate_elex_glassworm_redline-stealer_remcos_smoke-loader_wannacry
- Size 4.1MB
- Sample261026-qdvy6ad151
- SHA256 e213116a6eb80e80f79d9ee2e562a1dbd51b1cd6e6fd0e75c982782163ea002e
- MD5 c3e40d9d3810de25e7257f1cb97acec8
- SHA1 a1eed5339542e098ee8f2ffa33ea3f3b834c9fc7
- SHA512 e6a8fba21588576ff8e7f862b06917e72051ae7cf8bc3246124a8abd13444b1c6a7589b03eb4a5da16e9c2312c4e72d4bf61c0d174aca5bf8bcc1146cd06c678
- SSDEEP 98304:N94wkAjSOTjNfs+utdr5Jq2MUrqNY1TK90DJo:N9/Thfsd1Jq2MUrqNSi
- TLSH T1CC16BF02FAD1C5B6C1AB06344AB6AB194A7AEB910730CBE7379CB81C5F316D03D79359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_c3e40d9d3810de25e7257f1cb97acec8_amadey_darkgate_elex_glassworm_redline-stealer_remcos_smoke-loader_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_c3e40d9d3810de25e7257f1cb97acec8_amadey_darkgate_elex_glassworm_redline-stealer_remcos_smoke-loader_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_c3e40d9d3810de25e7257f1cb97acec8_amadey_darkgate_elex_glassworm_redline-stealer_remcos_smoke-loader_wannacry
- Size 4.1MB
- SHA256 e213116a6eb80e80f79d9ee2e562a1dbd51b1cd6e6fd0e75c982782163ea002e
- MD5 c3e40d9d3810de25e7257f1cb97acec8
- SHA1 a1eed5339542e098ee8f2ffa33ea3f3b834c9fc7
- SHA512 e6a8fba21588576ff8e7f862b06917e72051ae7cf8bc3246124a8abd13444b1c6a7589b03eb4a5da16e9c2312c4e72d4bf61c0d174aca5bf8bcc1146cd06c678
- SSDEEP 98304:N94wkAjSOTjNfs+utdr5Jq2MUrqNY1TK90DJo:N9/Thfsd1Jq2MUrqNSi
- TLSH T1CC16BF02FAD1C5B6C1AB06344AB6AB194A7AEB910730CBE7379CB81C5F316D03D79359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE