2026-07-10_392f629817f03425ee9a6ece3197da93_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-10_392f629817f03425ee9a6ece3197da93_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
Size 767KB
Sample260710-j5ye2ag161
SHA256 261808d979472654c43bd12230fccfdd51cb1b2ee59754477950bd0fdbd8f3e1
MD5 392f629817f03425ee9a6ece3197da93
SHA1 74bf5ea3c2d4e9a4328f31adbb7e95d8cf1be353
SHA512 5c88779c8879db9626433e87d821da522b55659f1947fa1149edc81fa3be6532e06c3bb11ce5b03ce9fe659c66fc00b78e6bb727aaf78f5fa64052fe181670df
SSDEEP 12288:skBv1Yx5oOU/GrkF24vuDrMzamA4G+6Hx659dHeDuwU/DiaGDAT20:ixQF24vuDrWamlMx659d+DX+Di9E20
TLSH
T1ACF4AD06AAA0C0B1D65586395876F27A0936BD2023D9D5E7F3E23D36CD312D2173E2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_392f629817f03425ee9a6ece3197da93_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-10_392f629817f03425ee9a6ece3197da93_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

.exe 767KB

2026-07-10_392f629817f03425ee9a6ece3197da93_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

IMPHASH 54998152ee3f5b795ec318ddb7b72dc1
SHA256 261808d979472654c43bd12230fccfdd51cb1b2ee59754477950bd0fdbd8f3e1
MD5 392f629817f03425ee9a6ece3197da93
SHA1 74bf5ea3c2d4e9a4328f31adbb7e95d8cf1be353
SHA512 5c88779c8879db9626433e87d821da522b55659f1947fa1149edc81fa3be6532e06c3bb11ce5b03ce9fe659c66fc00b78e6bb727aaf78f5fa64052fe181670df
SSDEEP 12288:skBv1Yx5oOU/GrkF24vuDrMzamA4G+6Hx659dHeDuwU/DiaGDAT20:ixQF24vuDrWamlMx659d+DX+Di9E20
TLSH
T1ACF4AD06AAA0C0B1D65586395876F27A0936BD2023D9D5E7F3E23D36CD312D2173E2BD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

281874

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\build\temporary\activitymon20\MSVC\Builds\x86\Release\Setup\selfex.pdb

comctl32

InitCommonControlsEx

kernel32

CloseHandle ReadFile MultiByteToWideChar GetACP WriteFile DosDateTimeToFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesW CreateProcessW WaitForSingleObject WideCharToMultiByte InitializeCriticalSection TerminateThread DeleteCriticalSection ResumeThread EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetVersion GetFileType GetStdHandle GetTickCount QueryPerformanceCounter SetFilePointer GlobalMemoryStatus FreeLibrary GetProcAddress LoadLibraryA GetVersionExA FlushConsoleInputBuffer CompareStringW CompareStringA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetProcessHeap SetEndOfFile LCMapStringW LCMapStringA CreateFileW GetModuleFileNameW RemoveDirectoryW FindClose FindNextFileW OutputDebugStringW FindFirstFileW SetCurrentDirectoryW CreateDirectoryW GetCurrentProcessId DeleteFileW GetTempFileNameW GetLastError GetTempPathW GetCurrentDirectoryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetConsoleCP GetConsoleMode ExitThread CreateThread GetStartupInfoW HeapReAlloc GetSystemTimeAsFileTime SetConsoleCtrlHandler ReadConsoleInputA SetConsoleMode RaiseException RtlUnwind CreateFileA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetModuleFileNameA VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess SetHandleCount GetStartupInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetModuleHandleA GetCPInfo GetOEMCP IsValidCodePage FlushFileBuffers SetEnvironmentVariableA

user32

MessageBoxA GetDesktopWindow GetProcessWindowStation GetUserObjectInformationW SendMessageW SetWindowLongW GetWindowLongW GetDlgItem SetDlgItemTextW EndDialog SetTimer SetWindowPos GetSystemMetrics GetWindowRect DialogBoxParamW PostMessageW

advapi32

ReportEventA RegisterEventSourceA DeregisterEventSource

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_392f629817f03425ee9a6ece3197da93_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

comctl32

kernel32

user32

advapi32

generic