Overview

overview

10

Static

static

10

2026-08-02...er.exe

windows10-2004-x64

10

2026-08-02...er.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-02_5b02ef26b4a5cf506977aa5724255ca9_amadey_darkgate_elex_mespinoza_remcos_smoke-loader
  • Size 910KB
  • Sample260802-dmzmgscl51
  • SHA256 cf8acd91cdda63fd7eb30229a887c8b5092bdde1ba4c3f744896e6d9cfa3e335
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
hijackloaderloader

Malware Config

Extracted

Family

  • hijackloader

Attributes
  • directory

    %APPDATA%\Signhost_test_5

  • inject_dll

    %windir%\SysWOW64\pla.dll

xor.hex

Targets

    • Target
      2026-08-02_5b02ef26b4a5cf506977aa5724255ca9_amadey_darkgate_elex_mespinoza_remcos_smoke-loader
    • Size 910KB
    • SHA256 cf8acd91cdda63fd7eb30229a887c8b5092bdde1ba4c3f744896e6d9cfa3e335
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    hijackloaderloader

    • Detects HijackLoader (aka IDAT Loader)

    • Family: HijackLoader, IDAT loader, Ghostulse,

      HijackLoader is a multi-stage loader, first seen in 2023.

      loaderhijackloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks