2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_karagany_maze_rhadamanthys_smoke-loader_vidar

General

Target
2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_karagany_maze_rhadamanthys_smoke-loader_vidar
Size 3.0MB
Sample260522-rtms6ags8s
SHA256 781b4e97ff15831f9ea5bf84f854cc024731e9db4ec0e04a40b0efc9ec81072d
MD5 03fa63db82fc6960294c73d4b1ef058c
SHA1 59969c26a1b24855552113846d1db73de9cef37f
SHA512 dc45e2d785b5d6f8ee64c762c3e386d9b20da46bf0ed13dd169e60ec167e8fcbad2b9a27c24ec3eb53fa9b1aff1ee4f24e9e0c59853c188aef7f6e17abb8f4e8
SSDEEP 49152:aB4sqnstLet3LyXrOO53RTqtiVvxdwq7M:a+sqnstLEcrOO53/4
TLSH
T107E5F70252F14622D0A9F57074E0671E0CB47FB54D22D65AFB44FA5EB83ABA167F2332
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_karagany_maze_rhadamanthys_smoke-loader_vidar

2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_karagany_maze_rhadamanthys_smoke-loader_vidar

.exe 3.0MB

SHA256 781b4e97ff15831f9ea5bf84f854cc024731e9db4ec0e04a40b0efc9ec81072d
MD5 03fa63db82fc6960294c73d4b1ef058c
SHA1 59969c26a1b24855552113846d1db73de9cef37f
SHA512 dc45e2d785b5d6f8ee64c762c3e386d9b20da46bf0ed13dd169e60ec167e8fcbad2b9a27c24ec3eb53fa9b1aff1ee4f24e9e0c59853c188aef7f6e17abb8f4e8
SSDEEP 49152:aB4sqnstLet3LyXrOO53RTqtiVvxdwq7M:a+sqnstLEcrOO53/4
TLSH
T107E5F70252F14622D0A9F57074E0671E0CB47FB54D22D65AFB44FA5EB83ABA167F2332
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

114646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths