2026-08-08_cc49873226a0dda60c4d0fe371574e9e_amadey_darkgate_elex_hijackloader_nymaim_remcos_rhadamanthys_smoke-loader

General

Target
2026-08-08_cc49873226a0dda60c4d0fe371574e9e_amadey_darkgate_elex_hijackloader_nymaim_remcos_rhadamanthys_smoke-loader
Size 928KB
Sample260808-vsf6rsvybw
SHA256 08f1d718edc48e91148c70255aa9b833eda367d9410bf1c333ccd502588007dd
MD5 cc49873226a0dda60c4d0fe371574e9e
SHA1 1d39c4fc644404cf3ecfdb1aefdeacbfc3dfc3d9
SHA512 44b1c9b081bb534a9d889d8a2d8b4c0bb7947bc324d291746ba3a7a7ea9f0f84bd1dd72e5a281aa53f4451123a7db0f76174bef1a61847f55f32bc90c0909f53
SSDEEP 12288:DG8LjtKkhgjI45iKl98uZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA5aJ8d:DGw3gjI45bl9e8AKA5any
TLSH
T17D155B32A2F18562E82670B095AB6839A45AFC390B94D0DFB6C0FD603D336C2F776755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_cc49873226a0dda60c4d0fe371574e9e_amadey_darkgate_elex_hijackloader_nymaim_remcos_rhadamanthys_smoke-loader

2026-08-08_cc49873226a0dda60c4d0fe371574e9e_amadey_darkgate_elex_hijackloader_nymaim_remcos_rhadamanthys_smoke-loader

.exe 928KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 08f1d718edc48e91148c70255aa9b833eda367d9410bf1c333ccd502588007dd
MD5 cc49873226a0dda60c4d0fe371574e9e
SHA1 1d39c4fc644404cf3ecfdb1aefdeacbfc3dfc3d9
SHA512 44b1c9b081bb534a9d889d8a2d8b4c0bb7947bc324d291746ba3a7a7ea9f0f84bd1dd72e5a281aa53f4451123a7db0f76174bef1a61847f55f32bc90c0909f53
SSDEEP 12288:DG8LjtKkhgjI45iKl98uZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA5aJ8d:DGw3gjI45bl9e8AKA5any
TLSH
T17D155B32A2F18562E82670B095AB6839A45AFC390B94D0DFB6C0FD603D336C2F776755
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths