General
- Target 2026-11-07_52d88597ad062a4671b8719b85badb92_amadey_darkgate_elex_gcleaner_glassworm_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 39.6MB
- Sample261107-rl2mcayv6j
- SHA256 4b889345f1454374f5dc8273a407b81ecaac5129279b65527e1dbcf55ba482c6
- MD5 52d88597ad062a4671b8719b85badb92
- SHA1 101192d45e75037d363e74ece1c913597252dc41
- SHA512 a7865ac72f9db452601235c7f75ff0abb218719e8c582a05a79748ddbc978fe36626a08db7f5d0eba53452667658a5b385c8a24e61646c253530fb9a031dbe15
- SSDEEP 786432:djxiflYKiSLO5nShfi+6B8O5jnYJIlePAB2PAB2qbHx:TidYKiEkoi1/5jWjP22P22qd
- TLSH T12897E029B740D432C5174E39190BC2E8D836FE21AD78549B3BB13E4C2FB9B99B535386
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_52d88597ad062a4671b8719b85badb92_amadey_darkgate_elex_gcleaner_glassworm_karagany_redline.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_52d88597ad062a4671b8719b85badb92_amadey_darkgate_elex_gcleaner_glassworm_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 39.6MB
- SHA256 4b889345f1454374f5dc8273a407b81ecaac5129279b65527e1dbcf55ba482c6
- MD5 52d88597ad062a4671b8719b85badb92
- SHA1 101192d45e75037d363e74ece1c913597252dc41
- SHA512 a7865ac72f9db452601235c7f75ff0abb218719e8c582a05a79748ddbc978fe36626a08db7f5d0eba53452667658a5b385c8a24e61646c253530fb9a031dbe15
- SSDEEP 786432:djxiflYKiSLO5nShfi+6B8O5jnYJIlePAB2PAB2qbHx:TidYKiEkoi1/5jWjP22P22qd
- TLSH T12897E029B740D432C5174E39190BC2E8D836FE21AD78549B3BB13E4C2FB9B99B535386
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.