2026-08-30_cb1e8bf0e2fccc50499d4d3ae0bb851d_amadey_darkgate_elex_maze_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_cb1e8bf0e2fccc50499d4d3ae0bb851d_amadey_darkgate_elex_maze_smoke-loader
Size 6.6MB
Sample260831-e18b8avckf
SHA256 a27b943bd7f443e5cd5817c55b9f7f0c93094b2d45f2151ddcc2853d8bb1c384
MD5 cb1e8bf0e2fccc50499d4d3ae0bb851d
SHA1 7718864d74d6bb6392298de23661d83a02597b8d
SHA512 b47676738dfd11f870279899fb63eabff217ebca0b0121486340501a3e2c311a63477fd983b30bf683b527b8aa02bdd573997ef36d10708123d55abd3884b92d
SSDEEP 196608:FJcG45l8Jbw7Rtt1jkcs7ad3cbb/V6KfbZrgBRUfs:zx2l8JbsF1oc8adMbbdTaK
TLSH
T138660212B740D162E45700B4791DE3A6507DBA344669C883B7C4BB1FBAB0BD2E939F4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_cb1e8bf0e2fccc50499d4d3ae0bb851d_amadey_darkgate_elex_maze_smoke-loader

File Explorer

2026-08-30_cb1e8bf0e2fccc50499d4d3ae0bb851d_amadey_darkgate_elex_maze_smoke-loader

.exe 6.6MB

2026-08-30_cb1e8bf0e2fccc50499d4d3ae0bb851d_amadey_darkgate_elex_maze_smoke-loader

IMPHASH b581f617f5dddbfd8ed7ee5b4123fea7
SHA256 a27b943bd7f443e5cd5817c55b9f7f0c93094b2d45f2151ddcc2853d8bb1c384
MD5 cb1e8bf0e2fccc50499d4d3ae0bb851d
SHA1 7718864d74d6bb6392298de23661d83a02597b8d
SHA512 b47676738dfd11f870279899fb63eabff217ebca0b0121486340501a3e2c311a63477fd983b30bf683b527b8aa02bdd573997ef36d10708123d55abd3884b92d
SSDEEP 196608:FJcG45l8Jbw7Rtt1jkcs7ad3cbb/V6KfbZrgBRUfs:zx2l8JbsF1oc8adMbbdTaK
TLSH
T138660212B740D162E45700B4791DE3A6507DBA344669C883B7C4BB1FBAB0BD2E939F4B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

259933

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCommState GetCommandLineA GetProcessTimes TlsSetValue GetConsoleCP IsValidLocale GetLocaleInfoW Sleep ReadProcessMemory CreateEventA GetSystemTimeAdjustment GetFileAttributesA Beep MulDiv CreateProcessA GetModuleFileNameW GetOverlappedResult GetACP ExitThread SetThreadPriority GetStartupInfoW FlushFileBuffers GetTempPathW RaiseException FindFirstFileA GetCPInfoExW GetLastError GetThreadLocale VirtualAlloc EnterCriticalSection GetDiskFreeSpaceW FindClose GetLocalTime LoadLibraryA CreateFileMappingA GetExitCodeThread RemoveDirectoryW DeviceIoControl GetSystemInfo EnumResourceTypesW GetUserDefaultLangID VirtualProtect GetUserDefaultUILanguage TlsAlloc GetVersion LocalFree EnumSystemLocalesW SuspendThread ResumeThread lstrcpyW CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW HeapReAlloc SetFilePointerEx ReadFile GetConsoleMode CloseHandle GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter WriteFile GetFileType GetStdHandle GetCurrentThreadId GetProcessHeap IsDebuggerPresent HeapSize GetModuleHandleExW LCMapStringW VirtualQueryEx ClearCommBreak GetPrivateProfileStringW GetSystemTimeAsFileTime ExpandEnvironmentStringsA GetCurrentThread WaitForSingleObjectEx ConnectNamedPipe SetCommBreak GetLogicalDrives WaitForSingleObject GetUserDefaultLCID GlobalLock GetEnvironmentStringsW CompareFileTime WaitNamedPipeA SystemTimeToFileTime EnumCalendarInfoW FindResourceW LoadLibraryExW GetSystemDefaultUILanguage GetDriveTypeW UnmapViewOfFile MapViewOfFile TlsGetValue SetFilePointer FindFirstFileW GlobalMemoryStatus GetFileSize GetTempFileNameW EncodePointer ExitProcess GetModuleHandleA GetFullPathNameW GetProcAddress GetModuleHandleW TlsFree TerminateProcess GetCurrentProcess WideCharToMultiByte DecodePointer LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW HeapFree GetCommandLineW RtlUnwind GetCPInfo HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount

user32

GetWindow IsRectEmpty EndPaint IsIconic PostMessageW DrawIconEx DrawTextExW DrawFocusRect CreateDialogIndirectParamA SetDlgItemInt GetMenu CheckMenuRadioItem GetWindowTextW MonitorFromWindow GetDesktopWindow DrawMenuBar GetKeyboardType InsertMenuW MessageBoxW BeginDeferWindowPos SetDlgItemTextW SendMessageW MapWindowPoints DestroyMenu GetDlgCtrlID ToUnicode GetMonitorInfoW GetWindowThreadProcessId GetDC

gdi32

SetWindowOrgEx Arc ExtFloodFill SetTextColor StretchBlt GetEnhMetaFileHeader PtInRegion CombineRgn Ellipse SetPolyFillMode GetBkColor CreateBitmapIndirect GetObjectW GetCharABCWidthsW SetWinMetaFileBits CloseEnhMetaFile CreatePolygonRgn

comdlg32

GetOpenFileNameW

advapi32

AdjustTokenPrivileges RegOpenKeyExW SetSecurityDescriptorOwner RegDeleteValueA ChangeServiceConfigW RegConnectRegistryW QueryServiceStatus RegOpenKeyExA RegQueryValueExW OpenServiceW OpenSCManagerW OpenProcessToken RegSetValueExW

shell32

CommandLineToArgvW

ole32

CoTaskMemFree

oleaut32

SafeArrayGetUBound VariantChangeType SysAllocStringLen VariantInit VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_cb1e8bf0e2fccc50499d4d3ae0bb851d_amadey_darkgate_elex_maze_smoke-loader

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic