General
- Target 2026-08-09_ed1bea8ac1624059e49c76b473fd9f52_amadey_darkgate_elex_floxif_luca-stealer_njrat_remcos_smoke-loader
- Size 1.7MB
- Sample260809-fdt2ra1ajc
- SHA256 d284800d138ae09f4b7923b1a1c624733287d551998ac0997dbd67135a4b87fa
- MD5 ed1bea8ac1624059e49c76b473fd9f52
- SHA1 1a115ed62fc30f1662563a0c85328e32d300908f
- SHA512 b1a150f32405c2f7a6473d2adb8181a277dda2ff61bfef0d701cd0b7a40e03e438f27164171a796fbeda53f49d4037a51b5e6d811606d31232e6dc1b6cb6a175
- SSDEEP 49152:F2vmHWdJAKkveZFS30sgb2EVhtf37AdlU:F2+AAtlO22htf3sdlU
- TLSH T16785F122B996817AD5B31630DDBA79285AFDBE350523C64F23C40A0E1DB0591BE3B773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_ed1bea8ac1624059e49c76b473fd9f52_amadey_darkgate_elex_floxif_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ed1bea8ac1624059e49c76b473fd9f52_amadey_darkgate_elex_floxif_luca-stealer_njrat_remcos_smoke-loader
- Size 1.7MB
- SHA256 d284800d138ae09f4b7923b1a1c624733287d551998ac0997dbd67135a4b87fa
- MD5 ed1bea8ac1624059e49c76b473fd9f52
- SHA1 1a115ed62fc30f1662563a0c85328e32d300908f
- SHA512 b1a150f32405c2f7a6473d2adb8181a277dda2ff61bfef0d701cd0b7a40e03e438f27164171a796fbeda53f49d4037a51b5e6d811606d31232e6dc1b6cb6a175
- SSDEEP 49152:F2vmHWdJAKkveZFS30sgb2EVhtf37AdlU:F2+AAtlO22htf3sdlU
- TLSH T16785F122B996817AD5B31630DDBA79285AFDBE350523C64F23C40A0E1DB0591BE3B773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL