General
- Target 2026-08-08_be54161e0b195af2faaafb72cb32c539_amadey_bandook_darkgate_elex_gcleaner_smoke-loader_stop
- Size 2.4MB
- Sample260808-vwqvdaap8y
- SHA256 3f97b43a9377a54de270d4eadc8444d38d55b54d28b769f520ffabf2286e7018
- MD5 be54161e0b195af2faaafb72cb32c539
- SHA1 66b95bbcc88baa4903f2bd3a2f29d90aa5d45367
- SHA512 79680355a8feb2fc47d2223778c2fd3d2d5d18d52529a3895cb28965e1691395feb34cb0d230ae07ed180e5c9207f7c8a6c55ef5ba2b4b74e3707a2466659b09
- SSDEEP 49152:TkH8Pn1rUBdpw5iSFq0nVhT0nOg0ONk1QAYMdd4uDuf:TkctqwA8ynOgA1QS6
- TLSH T1D3C5D061F6818437C11317385C1BE7DEA929BB305E2869877BEC2F4C5F396923D28297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_be54161e0b195af2faaafb72cb32c539_amadey_bandook_darkgate_elex_gcleaner_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_be54161e0b195af2faaafb72cb32c539_amadey_bandook_darkgate_elex_gcleaner_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_be54161e0b195af2faaafb72cb32c539_amadey_bandook_darkgate_elex_gcleaner_smoke-loader_stop
- Size 2.4MB
- SHA256 3f97b43a9377a54de270d4eadc8444d38d55b54d28b769f520ffabf2286e7018
- MD5 be54161e0b195af2faaafb72cb32c539
- SHA1 66b95bbcc88baa4903f2bd3a2f29d90aa5d45367
- SHA512 79680355a8feb2fc47d2223778c2fd3d2d5d18d52529a3895cb28965e1691395feb34cb0d230ae07ed180e5c9207f7c8a6c55ef5ba2b4b74e3707a2466659b09
- SSDEEP 49152:TkH8Pn1rUBdpw5iSFq0nVhT0nOg0ONk1QAYMdd4uDuf:TkctqwA8ynOgA1QS6
- TLSH T1D3C5D061F6818437C11317385C1BE7DEA929BB305E2869877BEC2F4C5F396923D28297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.