2026-11-09_4a50d75a716010daa8e6b1829e0b3439_amadey_darkgate_elex_glassworm_smoke-loader_stop

General

Target
2026-11-09_4a50d75a716010daa8e6b1829e0b3439_amadey_darkgate_elex_glassworm_smoke-loader_stop
Size 2.6MB
Sample261110-zagf2aah82
SHA256 6b2f051350389c98e752927564096f3323845cdc42ab2d66d4aa7e9b04ac330e
MD5 4a50d75a716010daa8e6b1829e0b3439
SHA1 e6cc5c193297bc1fa01f80c6d3138f9070088f54
SHA512 4a65602cda0d140faae2dc249f4333f8cfa600ecd6170b283d692aa07c0bf2f54062effc41ee6cc04aefac761f647a169f09f4e47c3ee834f023bf0977abe1d4
SSDEEP 24576:1FPt1bXHNz1ay0rUc3nckCIabjKoh9WC/MMphcuzKPgssStPUvgm:7TtKHCIabjKoh9WavrhKPgssSt2g
TLSH
T142C5E90167D84515ECBE1E7169B59232F9727CAF7D3EB20D6F40761E0A73AC0A662323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_4a50d75a716010daa8e6b1829e0b3439_amadey_darkgate_elex_glassworm_smoke-loader_stop

2026-11-09_4a50d75a716010daa8e6b1829e0b3439_amadey_darkgate_elex_glassworm_smoke-loader_stop

.exe 2.6MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 6b2f051350389c98e752927564096f3323845cdc42ab2d66d4aa7e9b04ac330e
MD5 4a50d75a716010daa8e6b1829e0b3439
SHA1 e6cc5c193297bc1fa01f80c6d3138f9070088f54
SHA512 4a65602cda0d140faae2dc249f4333f8cfa600ecd6170b283d692aa07c0bf2f54062effc41ee6cc04aefac761f647a169f09f4e47c3ee834f023bf0977abe1d4
SSDEEP 24576:1FPt1bXHNz1ay0rUc3nckCIabjKoh9WC/MMphcuzKPgssStPUvgm:7TtKHCIabjKoh9WavrhKPgssSt2g
TLSH
T142C5E90167D84515ECBE1E7169B59232F9727CAF7D3EB20D6F40761E0A73AC0A662323
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths