2026-07-01_9187349061b2b2289256cab14a9ff3ec_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar

General

Target
2026-07-01_9187349061b2b2289256cab14a9ff3ec_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar
Size 4.4MB
Sample260701-velt4aax2m
SHA256 67c6f4d1711635b12d36e070ca89df19e210779a36578781ed87a8d5ca08c72e
MD5 9187349061b2b2289256cab14a9ff3ec
SHA1 0b1d3b3beb392fffb7bcf5082c280468e921c4e1
SHA512 6475455d65c39ce3d09cce2aef65e5ea4d9432304e480957e72b7da011dc7822d1aad96c9052e6e3fa98cd2bca266f01507b9832009d96043b4765f8665168bc
SSDEEP 49152:haPcOpwxX0TYS/4MnYYJ2ZhqSGLHkJEMhHF+3j5D78OBUShKPgssSt2gKZeW4Ska:BO2pIDQDCs1Shv7St4fkZc
TLSH
T18C264A0DFEF44E66E0B39175C9A6976DAA323C511B3086CF1280B26DDE32FD09935726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_9187349061b2b2289256cab14a9ff3ec_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar

2026-07-01_9187349061b2b2289256cab14a9ff3ec_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar

.exe 4.4MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 67c6f4d1711635b12d36e070ca89df19e210779a36578781ed87a8d5ca08c72e
MD5 9187349061b2b2289256cab14a9ff3ec
SHA1 0b1d3b3beb392fffb7bcf5082c280468e921c4e1
SHA512 6475455d65c39ce3d09cce2aef65e5ea4d9432304e480957e72b7da011dc7822d1aad96c9052e6e3fa98cd2bca266f01507b9832009d96043b4765f8665168bc
SSDEEP 49152:haPcOpwxX0TYS/4MnYYJ2ZhqSGLHkJEMhHF+3j5D78OBUShKPgssSt2gKZeW4Ska:BO2pIDQDCs1Shv7St4fkZc
TLSH
T18C264A0DFEF44E66E0B39175C9A6976DAA323C511B3086CF1280B26DDE32FD09935726
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths