2026-07-08_6c035aa3b385eb359fc26efa60738b63_amadey_darkgate_elex_hawkeye_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_6c035aa3b385eb359fc26efa60738b63_amadey_darkgate_elex_hawkeye_remcos_smoke-loader
Size 15.3MB
Sample260708-e6grfsbw5m
SHA256 a8eb54c3c6f84538be6e3b90727b0b93e1a336489614388b4bc65ea30a6b979c
MD5 6c035aa3b385eb359fc26efa60738b63
SHA1 80d67e13e6a683d482242ffe2613f45a5bfb1294
SHA512 31859a597c02344e21c1cc28b915a4fbf3571468e8bf7136bc99741821e054d9cf42689395f950a2a1f29165a4d72442a1e1023599bdf91baa49e6677156d880
SSDEEP 393216:qnx6HLDr5xlHu4PD5yVF/mQuDhiKv1OrplrHNW9D1F2:o6HLB/HuAm/mQuli+SWT0
TLSH
T180F633301190A326FDF2463159BC8272C5A97EF2973084DBF3B439899AF6DD0997172E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_6c035aa3b385eb359fc26efa60738b63_amadey_darkgate_elex_hawkeye_remcos_smoke-loader

File Explorer

2026-07-08_6c035aa3b385eb359fc26efa60738b63_amadey_darkgate_elex_hawkeye_remcos_smoke-loader

.exe 15.3MB

2026-07-08_6c035aa3b385eb359fc26efa60738b63_amadey_darkgate_elex_hawkeye_remcos_smoke-loader

IMPHASH c85d04b241f1c5bbbb9896179c837be8
SHA256 a8eb54c3c6f84538be6e3b90727b0b93e1a336489614388b4bc65ea30a6b979c
MD5 6c035aa3b385eb359fc26efa60738b63
SHA1 80d67e13e6a683d482242ffe2613f45a5bfb1294
SHA512 31859a597c02344e21c1cc28b915a4fbf3571468e8bf7136bc99741821e054d9cf42689395f950a2a1f29165a4d72442a1e1023599bdf91baa49e6677156d880
SSDEEP 393216:qnx6HLDr5xlHu4PD5yVF/mQuDhiKv1OrplrHNW9D1F2:o6HLB/HuAm/mQuli+SWT0
TLSH
T180F633301190A326FDF2463159BC8272C5A97EF2973084DBF3B439899AF6DD0997172E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

184380

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathIsDirectoryW

kernel32

GetLongPathNameW GetFileSize CloseHandle GetFullPathNameW CreateFileW GetFileAttributesW DeleteFileW GetProcAddress GetExitCodeProcess GetLastError WaitForSingleObject LoadResource FindClose lstrcmpiW LoadLibraryW GetModuleFileNameW CreateProcessW GetCommandLineW GetEnvironmentVariableW FindResourceW GetSystemDirectoryW GetTempPathW SetCurrentDirectoryW GetCurrentDirectoryW GetDiskFreeSpaceW CreateDirectoryW RemoveDirectoryW SetFileAttributesW QueryPerformanceCounter FindNextFileW GetVersionExW WideCharToMultiByte GetLocaleInfoW GetNumberFormatW GetConsoleTitleW GetConsoleWindow GetModuleHandleW SetEnvironmentVariableA SetEndOfFile WriteConsoleW HeapReAlloc FreeLibrary InterlockedExchange EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW LoadLibraryExW OutputDebugStringW FreeEnvironmentStringsW GetEnvironmentStringsW FindFirstFileW InitializeCriticalSectionAndSpinCount PeekNamedPipe GetFileInformationByHandle SetFilePointer GetCurrentProcessId SetFileTime GetTimeZoneInformation DosDateTimeToFileTime MultiByteToWideChar EncodePointer DecodePointer SetStdHandle GetFileType EnterCriticalSection LeaveCriticalSection ReadConsoleW RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent InterlockedDecrement GetCPInfo HeapFree GetSystemTimeAsFileTime ReadFile FileTimeToLocalFileTime FindFirstFileExW GetDriveTypeW FileTimeToSystemTime MoveFileExW SetFilePointerEx HeapAlloc GetStdHandle WriteFile ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize Sleep FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection InterlockedIncrement IsValidCodePage GetACP GetOEMCP SetLastError GetCurrentThreadId GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStringTypeW GetProcessHeap

user32

LoadStringW LoadIconW LoadCursorW FindWindowW GetWindowLongW DrawTextW KillTimer SetTimer GetKeyState SetDlgItemTextW GetDlgItem EndDialog DialogBoxParamW ShowWindow RegisterClassExW PostQuitMessage DefWindowProcW SendMessageW TranslateMessage DispatchMessageW PeekMessageW

gdi32

GetStockObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_6c035aa3b385eb359fc26efa60738b63_amadey_darkgate_elex_hawkeye_remcos_smoke-loader

shlwapi

kernel32

user32

gdi32

shell32

generic