2026-05-22_c00f555f38784b02a575db2764eae424_darkgate_elex_hijackloader_rhadamanthys_smoke-loader

General

Target
2026-05-22_c00f555f38784b02a575db2764eae424_darkgate_elex_hijackloader_rhadamanthys_smoke-loader
Size 756KB
Sample260522-vner5sdv71
SHA256 e5486c1706e3bfb5f04b259991d3c509cd9d606f1d985b84d5a1577f21dd16ec
MD5 c00f555f38784b02a575db2764eae424
SHA1 21fd3b9630b4b1e802f35c373dcbe728028929a6
SHA512 c219bd1e47eece50fd1f00c1a29bffde35389d1af8110a969707979b967412ba55baeb70dbccab5257f2f14ecd6bdfc4df9b8f1bf890d1db4b0968c838f66421
SSDEEP 12288:t3A+JFo8PT5vLydK9Na54G2nCAvXk1Gt8j3auU:t3nFoAlaK9Na54GXUk1HzauU
TLSH
T190F45A23B7E88461E065563049B89652D771FC1A1F11C78F26BC5B0D1E35BF0BE3AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_c00f555f38784b02a575db2764eae424_darkgate_elex_hijackloader_rhadamanthys_smoke-loader

2026-05-22_c00f555f38784b02a575db2764eae424_darkgate_elex_hijackloader_rhadamanthys_smoke-loader

.exe 756KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e5486c1706e3bfb5f04b259991d3c509cd9d606f1d985b84d5a1577f21dd16ec
MD5 c00f555f38784b02a575db2764eae424
SHA1 21fd3b9630b4b1e802f35c373dcbe728028929a6
SHA512 c219bd1e47eece50fd1f00c1a29bffde35389d1af8110a969707979b967412ba55baeb70dbccab5257f2f14ecd6bdfc4df9b8f1bf890d1db4b0968c838f66421
SSDEEP 12288:t3A+JFo8PT5vLydK9Na54G2nCAvXk1Gt8j3auU:t3nFoAlaK9Na54GXUk1HzauU
TLSH
T190F45A23B7E88461E065563049B89652D771FC1A1F11C78F26BC5B0D1E35BF0BE3AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

138990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

WsatConfig.pdb