2026-07-29_d44b1d3f0e8951f5c9215a25bde501a5_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-07-29_d44b1d3f0e8951f5c9215a25bde501a5_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stealc_stop
Size 10.6MB
Sample260729-x5ff4sem4s
SHA256 fa3cc7ad447acab5bf4588b031071b8c82a844c5e756702d035696a6db7bbaf4
MD5 d44b1d3f0e8951f5c9215a25bde501a5
SHA1 b8c9cb207c204af7dae2f49df801e5c9f65d7f81
SHA512 343c0218783372baf28dbe65f74a9da38d115150e4699160150bbc310dad956d042f6a849753a3fa5ef2220cdd2f8598cc3b62c042ab8fbee30a3a79c85309e9
SSDEEP 49152:B41eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeez:
TLSH
T17AB64B919D94AC69C83160BEBABD371C04EFDF3017B08E769029D5D9C92B7E19AD402F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_d44b1d3f0e8951f5c9215a25bde501a5_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-07-29_d44b1d3f0e8951f5c9215a25bde501a5_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stealc_stop

.exe 10.6MB

2026-07-29_d44b1d3f0e8951f5c9215a25bde501a5_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stealc_stop

IMPHASH 7dd08063ba15d7295e29dcfabb5e9889
SHA256 fa3cc7ad447acab5bf4588b031071b8c82a844c5e756702d035696a6db7bbaf4
MD5 d44b1d3f0e8951f5c9215a25bde501a5
SHA1 b8c9cb207c204af7dae2f49df801e5c9f65d7f81
SHA512 343c0218783372baf28dbe65f74a9da38d115150e4699160150bbc310dad956d042f6a849753a3fa5ef2220cdd2f8598cc3b62c042ab8fbee30a3a79c85309e9
SSDEEP 49152:B41eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeez:
TLSH
T17AB64B919D94AC69C83160BEBABD371C04EFDF3017B08E769029D5D9C92B7E19AD402F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fawezojib-janehigurigec42\goloco\juketo-lagix\cugapiha.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA GetExitCodeThread AddAtomW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect SetCalendarInfoA GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo OutputDebugStringW SetStdHandle SetFilePointerEx HeapReAlloc LCMapStringW GetStringTypeW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-29_d44b1d3f0e8951f5c9215a25bde501a5_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stealc_stop

kernel32

generic