2026-07-06_b44f379264182e18beb430f8a77505f0_amadey_darkgate_elex_redline-stealer_remcos_smoke-loader

General

Target
2026-07-06_b44f379264182e18beb430f8a77505f0_amadey_darkgate_elex_redline-stealer_remcos_smoke-loader
Size 954KB
Sample260707-bvb52sfs71
SHA256 f4f8fc283c5a8f01e8cbb13bc5c954969f239af69baf6735c49cff5d4b3ba804
MD5 b44f379264182e18beb430f8a77505f0
SHA1 a217986fc489a8467aa4cce69b87ab5c526f7c08
SHA512 8d4cefb182f66dce52460159bb8725f023904011825babc339d3970d1f352dd3dbae2ece26c66eba1f3f238b85c92af3f8a6b09de2479333326c7c4954c9fbaf
SSDEEP 24576:3zJv3K15PCnwJm+pg/VrR2Ymsi4D5xSX9Jhi+u71inbX:jl/nw0NJRUsi0QJh1CubX
TLSH
T110259E21F582D031E9E211B287B91FB61C399621032A94E777E82DD95FB48E13A7F317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_b44f379264182e18beb430f8a77505f0_amadey_darkgate_elex_redline-stealer_remcos_smoke-loader

File Explorer

2026-07-06_b44f379264182e18beb430f8a77505f0_amadey_darkgate_elex_redline-stealer_remcos_smoke-loader

.exe 954KB

2026-07-06_b44f379264182e18beb430f8a77505f0_amadey_darkgate_elex_redline-stealer_remcos_smoke-loader

IMPHASH f263853f4a7f45c25187f8a27dbfa999
SHA256 f4f8fc283c5a8f01e8cbb13bc5c954969f239af69baf6735c49cff5d4b3ba804
MD5 b44f379264182e18beb430f8a77505f0
SHA1 a217986fc489a8467aa4cce69b87ab5c526f7c08
SHA512 8d4cefb182f66dce52460159bb8725f023904011825babc339d3970d1f352dd3dbae2ece26c66eba1f3f238b85c92af3f8a6b09de2479333326c7c4954c9fbaf
SSDEEP 24576:3zJv3K15PCnwJm+pg/VrR2Ymsi4D5xSX9Jhi+u71inbX:jl/nw0NJRUsi0QJh1CubX
TLSH
T110259E21F582D031E9E211B287B91FB61C399621032A94E777E82DD95FB48E13A7F317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

642954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcess SetConsoleTextAttribute GetConsoleScreenBufferInfo GetStdHandle InterlockedCompareExchange GetProcessHeap OutputDebugStringW OutputDebugStringA WaitForSingleObjectEx WaitForSingleObject WriteFile WideCharToMultiByte UnmapViewOfFile UnlockFileEx UnlockFile SystemTimeToFileTime Sleep SetFilePointer SetEndOfFile ReadFile QueryPerformanceCounter MultiByteToWideChar MapViewOfFile LockFileEx LockFile LocalFree LoadLibraryA HeapCompact HeapValidate HeapSize HeapReAlloc HeapFree HeapDestroy HeapCreate HeapAlloc GetVersionExW GetVersionExA GetTickCount GetTempPathW GetTempPathA GetSystemTimeAsFileTime GetSystemTime GetSystemInfo GetLastError GetFullPathNameW GetFullPathNameA GetFileSize GetFileAttributesExW GetFileAttributesW GetFileAttributesA GetDiskFreeSpaceW GetDiskFreeSpaceA GetCurrentProcessId FormatMessageW FormatMessageA FlushFileBuffers DeleteFileW DeleteFileA CreateMutexW CreateFileMappingW CreateFileMappingA CreateFileW CreateFileA CloseHandle AreFileApisANSI DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection TryEnterCriticalSection GetCurrentThreadId GetCommandLineA HeapSetInformation GetModuleHandleW ExitProcess DecodePointer CreateProcessA DuplicateHandle ExitThread CreateThread SetUnhandledExceptionFilter GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement IsProcessorFeaturePresent UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode SetStdHandle RtlUnwind CreatePipe GetExitCodeProcess LCMapStringW GetTimeZoneInformation GetStringTypeW WriteConsoleW CompareStringW SetEnvironmentVariableA RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_b44f379264182e18beb430f8a77505f0_amadey_darkgate_elex_redline-stealer_remcos_smoke-loader

kernel32

generic