2026-05-31_cb06ad5201a0d66dfd1799cfc3be232c_amadey_darkgate_elex_glassworm_hawkeye_remcos_rhadamanthys_smoke-loader

General

Target
2026-05-31_cb06ad5201a0d66dfd1799cfc3be232c_amadey_darkgate_elex_glassworm_hawkeye_remcos_rhadamanthys_smoke-loader
Size 3.3MB
Sample260531-std2pabs8v
SHA256 1f9778c5a646c81807ba6d432cfcc74bf514f746211b0164d9d077ca72651c82
MD5 cb06ad5201a0d66dfd1799cfc3be232c
SHA1 6d15c67e2f4871428ea2bf71ac9903e063a6b867
SHA512 6e1537ddb6d87f9331732f2d0d34e630f4f8cb6a35b3e78f1fbf0f75a7863e4673ca0ca3506916d0237ea3c944189bfb7f71a72b37a60c2a17e7cfc713b18323
SSDEEP 49152:+IiISydB3IGLtk1qbLLfUHeW4SkZP4sz9MbAZ/7yQPI7BCx5pYq:2WCYKBfkZcARucx56
TLSH
T154F57B26F6B887B6D4B38075C9E6A665EA3178010B30D6CB525D932C1E33BE18D37736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-31_cb06ad5201a0d66dfd1799cfc3be232c_amadey_darkgate_elex_glassworm_hawkeye_remcos_rhadamanthys_smoke-loader

2026-05-31_cb06ad5201a0d66dfd1799cfc3be232c_amadey_darkgate_elex_glassworm_hawkeye_remcos_rhadamanthys_smoke-loader

.exe 3.3MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1f9778c5a646c81807ba6d432cfcc74bf514f746211b0164d9d077ca72651c82
MD5 cb06ad5201a0d66dfd1799cfc3be232c
SHA1 6d15c67e2f4871428ea2bf71ac9903e063a6b867
SHA512 6e1537ddb6d87f9331732f2d0d34e630f4f8cb6a35b3e78f1fbf0f75a7863e4673ca0ca3506916d0237ea3c944189bfb7f71a72b37a60c2a17e7cfc713b18323
SSDEEP 49152:+IiISydB3IGLtk1qbLLfUHeW4SkZP4sz9MbAZ/7yQPI7BCx5pYq:2WCYKBfkZcARucx56
TLSH
T154F57B26F6B887B6D4B38075C9E6A665EA3178010B30D6CB525D932C1E33BE18D37736
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

155390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ComSvcConfig.pdb