2026-07-20_5867a15e4dbdb42bf4d4eef9d9fb2c43_amadey_darkgate_elex_mafia_magniber_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_5867a15e4dbdb42bf4d4eef9d9fb2c43_amadey_darkgate_elex_mafia_magniber_remcos_smoke-loader
Size 2.1MB
Sample260720-teekcaft9l
SHA256 972f2746c862529d5c056bd548c88b0229fd1c9ad95e441aa6a99150c3f4c70b
MD5 5867a15e4dbdb42bf4d4eef9d9fb2c43
SHA1 77cceb51c6bf048cdee1a0c986f14c3934eb44c7
SHA512 b2a27a55920f50bb9444f085ade7703c4950713aa0048fe2107fc1b11f6a00fc4f27bb12dba11a08ee87cb2ee0fb67e803bf12a6aa5a6310ff42005f7bbba3eb
SSDEEP 49152:l0pxcrSD204a1CdmJR9n+/Q8kJh9hNhBX3fx4x8EVep:l0pxfbf+/4h9hNhBX3fix8EVy
TLSH
T1ACA5D0517DA14436E431013488AAC721DA9ABD768371A89F77E8343ECA7F9C3247726F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_5867a15e4dbdb42bf4d4eef9d9fb2c43_amadey_darkgate_elex_mafia_magniber_remcos_smoke-loader

File Explorer

2026-07-20_5867a15e4dbdb42bf4d4eef9d9fb2c43_amadey_darkgate_elex_mafia_magniber_remcos_smoke-loader

.exe 2.1MB

2026-07-20_5867a15e4dbdb42bf4d4eef9d9fb2c43_amadey_darkgate_elex_mafia_magniber_remcos_smoke-loader

IMPHASH 4e5ac3b35d8d46874dcf133ae994c8c6
SHA256 972f2746c862529d5c056bd548c88b0229fd1c9ad95e441aa6a99150c3f4c70b
MD5 5867a15e4dbdb42bf4d4eef9d9fb2c43
SHA1 77cceb51c6bf048cdee1a0c986f14c3934eb44c7
SHA512 b2a27a55920f50bb9444f085ade7703c4950713aa0048fe2107fc1b11f6a00fc4f27bb12dba11a08ee87cb2ee0fb67e803bf12a6aa5a6310ff42005f7bbba3eb
SSDEEP 49152:l0pxcrSD204a1CdmJR9n+/Q8kJh9hNhBX3fx4x8EVep:l0pxfbf+/4h9hNhBX3fix8EVy
TLSH
T1ACA5D0517DA14436E431013488AAC721DA9ABD768371A89F77E8343ECA7F9C3247726F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

484857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange GetACP GetCurrentDirectoryW SetCurrentDirectoryW LoadLibraryW lstrlenW GlobalUnlock GlobalLock ExitProcess LocalFileTimeToFileTime GetFileAttributesW SetFileTime MulDiv VerifyVersionInfoW VerSetConditionMask OpenProcess GetCurrentProcessId GlobalAlloc LocalFree FormatMessageW InterlockedIncrement InterlockedDecrement lstrcpyW lstrcmpiW lstrcpynW HeapFree HeapAlloc DecodePointer EncodePointer InitializeCriticalSection ResumeThread CreateThread GetSystemTimeAsFileTime GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapReAlloc RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetStdHandle IsProcessorFeaturePresent GetCPInfo GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread LCMapStringW GetLocaleInfoW Sleep EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetStringTypeW HeapSize FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetConsoleCP GetConsoleMode GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle FlushFileBuffers CreateFileA WriteConsoleW SetEndOfFile GetProcessHeap LockResource SizeofResource LoadResource FindResourceW FreeResource CreateMutexW GetCommandLineW GetLastError GetTickCount SystemTimeToFileTime GetLocalTime UnmapViewOfFile WriteFile MapViewOfFile CreateFileMappingW CreateFileW ReadFile SetFilePointer GetFileSize GetFileInformationByHandle FileTimeToSystemTime GetSystemInfo GetProcAddress GetModuleHandleW CloseHandle CreateProcessW OutputDebugStringA WideCharToMultiByte SetEnvironmentVariableW GetEnvironmentVariableW MultiByteToWideChar CreateDirectoryW ExitThread GetModuleFileNameW

user32

GetPropW SetPropW AdjustWindowRectEx GetMenu RegisterClassW RegisterClassExW GetClassInfoExW MonitorFromPoint FillRect CharPrevW SetRect DrawTextW GetWindowRgn UpdateLayeredWindow MoveWindow IsWindowEnabled CreateCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen DestroyMenu TrackPopupMenu EnableMenuItem AppendMenuW CreatePopupMenu GetCaretBlinkTime GetKeyNameTextW MapVirtualKeyExW GetKeyboardLayout SetWindowTextW SetForegroundWindow DrawTextA wsprintfA InvalidateRgn GetGUIThreadInfo CreateAcceleratorTableW GetWindowTextW GetWindowTextLengthW EqualRect UpdateWindow GetMessageW TranslateMessage DispatchMessageW CallWindowProcW IsIconic GetActiveWindow GetWindow BeginPaint GetUpdateRect IsRectEmpty IsWindowVisible IntersectRect MonitorFromWindow GetMonitorInfoW GetSysColor MapWindowPoints CreateWindowExW GetFocus SetFocus IsZoomed DestroyWindow CharNextW GetCursorPos SendMessageW GetDC ReleaseDC LoadImageW PtInRect GetWindowRect ReleaseCapture SetCapture IsWindow KillTimer SetTimer InvalidateRect GetWindowLongW SetWindowLongW GetKeyState LoadCursorW SetCursor UnionRect InflateRect OffsetRect SetWindowPos PostMessageW PostQuitMessage ScreenToClient GetClientRect ShowWindow GetSystemMetrics EnableWindow DefWindowProcW wsprintfW MessageBoxW GetParent SetWindowRgn EndPaint

advapi32

RegSetValueExW RegQueryValueExW RegCloseKey RegOpenKeyExW RegCreateKeyExW

shell32

DragQueryFileW CommandLineToArgvW ShellExecuteExW

ole32

DoDragDrop CoCreateGuid CoUninitialize CoInitialize CoCreateInstance OleDuplicateData RevokeDragDrop RegisterDragDrop OleLockRunning CLSIDFromProgID CLSIDFromString ReleaseStgMedium CreateStreamOnHGlobal

shlwapi

PathRemoveFileSpecW PathFileExistsW

wininet

HttpOpenRequestW HttpSendRequestW InternetOpenW InternetConnectW

ws2_32

WSAStartup gethostname gethostbyname

gdi32

Rectangle RestoreDC BitBlt SaveDC CreateRoundRectRgn SelectClipRgn ExtSelectClipRgn CreateRectRgnIndirect GetClipBox CombineRgn StretchBlt CreateDIBSection SetStretchBltMode CreateSolidBrush LineTo MoveToEx CreateEnhMetaFileW TextOutW GetTextExtentPoint32W GetCharABCWidthsW SetBkColor SetTextColor SetBkMode GetObjectA SelectObject CreateFontIndirectW GetObjectW CreateCompatibleDC GdiFlush PtInRegion CreateRectRgn CloseEnhMetaFile SetWindowOrgEx RemoveFontMemResourceEx AddFontMemResourceEx CreatePen CreateDIBitmap GetBitmapBits SetBitmapBits GetEnhMetaFileHeader GetDeviceCaps CreatePenIndirect GetTextMetricsW GetStockObject DeleteObject DeleteDC PlayEnhMetaFile CreateCompatibleBitmap CreatePatternBrush GetTextExtentPointA

oleaut32

CreateErrorInfo SysFreeString VariantInit VariantClear GetErrorInfo VariantChangeType SetErrorInfo SysAllocString

comctl32

InitCommonControlsEx ord17 _TrackMouseEvent

gdiplus

GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdiplusStartup GdiplusShutdown GdipFree GdipAlloc GdipDeleteBrush GdipCreatePen1 GdipDeletePen GdipCloneStringFormat GdipDeleteStringFormat GdipStringFormatGetGenericTypographic GdipCreatePath GdipDeletePath GdipDeleteGraphics GdipDeleteFont GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipDisposeImage GdipCreateSolidFill GdipSetPenMode GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipAddPathLine ord1 GdipCreateFromHDC GdipSetTextRenderingHint GdipSetInterpolationMode GdipSetSmoothingMode GdipDrawRectangleI GdipDrawPath GdipFillRectangleI GdipFillPath GdipDrawString GdipMeasureString GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipCloneBrush GdipCloneImage GdipTranslateWorldTransform GdipRotateWorldTransform GdipDrawImageRectI GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount

imm32

ImmSetCompositionWindow ImmGetContext ImmReleaseContext

Name

.text

Size

660KB

Virtual Size

660KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

17B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

674KB

Virtual Size

673KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

608KB

Virtual Size

612KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_5867a15e4dbdb42bf4d4eef9d9fb2c43_amadey_darkgate_elex_mafia_magniber_remcos_smoke-loader

kernel32

user32

advapi32

shell32

ole32

shlwapi

wininet

ws2_32

gdi32

oleaut32

comctl32

gdiplus

imm32

generic