2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop

General

Target
2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop
Size 1.2MB
Sample260418-rnaxeaby2n
SHA256 b6119c0873a0de0b5ad91ad46dfca154de08fe537c04fac0f5aa6a02d81d29e2
MD5 add50c3e7251cbf6ba58f394f9176cf3
SHA1 134873433e3dfc0893546c3008ec60d8231203af
SHA512 38cd997212dc2d4bb7f7e8f4cd40a9cd97c5233291df440a59910ce9889a0ae9642d79700891d62e8aae1fdefc31b8b7c10e0f7d8faf62954391a0ddb94790ed
SSDEEP 12288:Tg1JZlT/sBLrHPgiFgtcYn7FiwtOw6BaxtOw6BaKKi8C+lPYkiM+FSD:Tg1flT/AIiIcaL6BO6Bwc+lPYBnID
TLSH
T11945291376904032D0632530656E961E8635FC1ECB539EDB57AC2FCEFBE16E06A39236
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop

2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop

.exe 1.2MB

SHA256 b6119c0873a0de0b5ad91ad46dfca154de08fe537c04fac0f5aa6a02d81d29e2
MD5 add50c3e7251cbf6ba58f394f9176cf3
SHA1 134873433e3dfc0893546c3008ec60d8231203af
SHA512 38cd997212dc2d4bb7f7e8f4cd40a9cd97c5233291df440a59910ce9889a0ae9642d79700891d62e8aae1fdefc31b8b7c10e0f7d8faf62954391a0ddb94790ed
SSDEEP 12288:Tg1JZlT/sBLrHPgiFgtcYn7FiwtOw6BaxtOw6BaKKi8C+lPYkiM+FSD:Tg1flT/AIiIcaL6BO6Bwc+lPYBnID
TLSH
T11945291376904032D0632530656E961E8635FC1ECB539EDB57AC2FCEFBE16E06A39236
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

32915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths