General

  • Target
    2026-07-23_55335ef1c71cab41edf0eb15046b70ab_amadey_darkgate_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop
  • Size 98KB
  • Sample260723-bpec8ayfja
  • SHA256 f4fc01ecf54a6db760b5f666ca1befc89beea2e407135bf2ef02e2494f92619f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-07-23_55335ef1c71cab41edf0eb15046b70ab_amadey_darkgate_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop
    .exe 98KB

2026-07-23_55335ef1c71cab41edf0eb15046b70ab_amadey_darkgate_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop

  • IMPHASH 4a1872ccdc3783abe429afb76f5c1861
  • SHA256 f4fc01ecf54a6db760b5f666ca1befc89beea2e407135bf2ef02e2494f92619f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a8:d4:a9:ac:e0:36:c0:39:d4:0b:a2:54:23:40:30:62:ae:96:56:49:dc:30:5d:81:1d:96:76:d9:86:3b:ac:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=1026605606620,CN=AO Proizvodstvennaya Firma SKB Kontur,O=AO Proizvodstvennaya Firma SKB Kontur,STREET=ul Narodnoy voli\, str 19a,L=Yekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.3.6.1.4.1.311.60.2.1.2=#131453766572646c6f76736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
13142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\BuildAgent\work\7236625856f3c609\bin\Release_Win32\hookldr.pdb