2026-07-04_3fd9570e03a89625ea8d28044ba8c64a_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar

General

Target
2026-07-04_3fd9570e03a89625ea8d28044ba8c64a_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar
Size 4.6MB
Sample260704-xtd4xacv2w
SHA256 1c9da8a43fa82c9bd5f17097ec02c19a11da9ed1328244e1dfeed1c8c2419e3e
MD5 3fd9570e03a89625ea8d28044ba8c64a
SHA1 7054b6804d25fda96388bc1b9e37f571ea794e64
SHA512 139ceecf007a511849779156973b516f67c2d4b8516967d0cf60dfc0c927facaf8393bf3e044de51994baba6ec315d78f0292bf20dd17bfd81e70ee6952f149e
SSDEEP 49152:haPcOpwxX0TYS/4MnYYJ2ZhqSGLHkJEMhHF+3j5D78OBUShKPgssSt2gKAPji0Ax:BO2pIDQDCs1Shv7StPjo0jo
TLSH
T11B264A1DFEE44E65E0B39175C9A2935DEA323C511B3086CF1280B669EE32FD19936732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_3fd9570e03a89625ea8d28044ba8c64a_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar

2026-07-04_3fd9570e03a89625ea8d28044ba8c64a_amadey_darkgate_elex_icedid_smoke-loader_stealc_stop_vidar

.exe 4.6MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 1c9da8a43fa82c9bd5f17097ec02c19a11da9ed1328244e1dfeed1c8c2419e3e
MD5 3fd9570e03a89625ea8d28044ba8c64a
SHA1 7054b6804d25fda96388bc1b9e37f571ea794e64
SHA512 139ceecf007a511849779156973b516f67c2d4b8516967d0cf60dfc0c927facaf8393bf3e044de51994baba6ec315d78f0292bf20dd17bfd81e70ee6952f149e
SSDEEP 49152:haPcOpwxX0TYS/4MnYYJ2ZhqSGLHkJEMhHF+3j5D78OBUShKPgssSt2gKAPji0Ax:BO2pIDQDCs1Shv7StPjo0jo
TLSH
T11B264A1DFEE44E65E0B39175C9A2935DEA323C511B3086CF1280B669EE32FD19936732
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths