2026-07-19_f574e1810f30baa58a414482cd03b2ff_amadey_darkgate_elex_smoke-loader_stop_wannacry

General

Target
2026-07-19_f574e1810f30baa58a414482cd03b2ff_amadey_darkgate_elex_smoke-loader_stop_wannacry
Size 4.1MB
Sample260719-zankcaev5x
SHA256 0f13a32186abf299124a4495c37030a642de934f5e6cf85301bce9a6c5906b07
MD5 f574e1810f30baa58a414482cd03b2ff
SHA1 7f6f40f0bbe29e4b0ea8716ee7ea5958811145ed
SHA512 b5e8ca02c0e7d16c3267ecca0a138bdc9be0648d769b532145c93341947461aed42111128b7de1886e7ea1284624c654864118bcb4ffa7c83f2b28dd3252ae8a
SSDEEP 49152:C/IabjKoh9WsWOrE2MfFhKPgssSt2gV0g7mM+M6RkMkIM7I067wqJtb2I:SIabjKoh9WsxGhv7StGM+M6RkMkIM7z
TLSH
T1E7161A0EEE949F21D0BA1570B9E1C36F5DA27CD10932855B3385BB6ED932F8157E2322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_f574e1810f30baa58a414482cd03b2ff_amadey_darkgate_elex_smoke-loader_stop_wannacry

2026-07-19_f574e1810f30baa58a414482cd03b2ff_amadey_darkgate_elex_smoke-loader_stop_wannacry

.exe 4.1MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 0f13a32186abf299124a4495c37030a642de934f5e6cf85301bce9a6c5906b07
MD5 f574e1810f30baa58a414482cd03b2ff
SHA1 7f6f40f0bbe29e4b0ea8716ee7ea5958811145ed
SHA512 b5e8ca02c0e7d16c3267ecca0a138bdc9be0648d769b532145c93341947461aed42111128b7de1886e7ea1284624c654864118bcb4ffa7c83f2b28dd3252ae8a
SSDEEP 49152:C/IabjKoh9WsWOrE2MfFhKPgssSt2gV0g7mM+M6RkMkIM7I067wqJtb2I:SIabjKoh9WsxGhv7StGM+M6RkMkIM7z
TLSH
T1E7161A0EEE949F21D0BA1570B9E1C36F5DA27CD10932855B3385BB6ED932F8157E2322
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths