General
- Target 2026-09-11_704047860f0b838f7c7373d58d7ca40c_darkgate_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 6.3MB
- Sample260912-k2kv7ssgpb
- SHA256 0ee5887f1202277ea40c1791dff14b17654bd52d2aff67a252bb0f5ad02da68b
- MD5 704047860f0b838f7c7373d58d7ca40c
- SHA1 f930b1e4f67271e4abceaddc54d7cc161deb5a9a
- SHA512 76cb0bbf45bda44bab086694493feae83dd7ede8d1e866b849425a6d7ff0181f9a97ea9f1c258140ccdce3941a1471a9cc86f44dbb6444b13ed89882c178d4e0
- SSDEEP 98304:NQJjh5+9PdrV4e2Z11Ln0JLgwbC8m+zpjXEfHqQUReYNa1Lwp1Ws3iwFU7tdIAZQ:uzQnw11gJfbxHtUfTU3Na1A1Ws3iw6G
- TLSH T1536633B076B0E076D0AA1E3DDAE4D2F43E502C62D722828B779D3E1B7BF43519946247
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-11_704047860f0b838f7c7373d58d7ca40c_darkgate_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_704047860f0b838f7c7373d58d7ca40c_darkgate_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 6.3MB
- SHA256 0ee5887f1202277ea40c1791dff14b17654bd52d2aff67a252bb0f5ad02da68b
- MD5 704047860f0b838f7c7373d58d7ca40c
- SHA1 f930b1e4f67271e4abceaddc54d7cc161deb5a9a
- SHA512 76cb0bbf45bda44bab086694493feae83dd7ede8d1e866b849425a6d7ff0181f9a97ea9f1c258140ccdce3941a1471a9cc86f44dbb6444b13ed89882c178d4e0
- SSDEEP 98304:NQJjh5+9PdrV4e2Z11Ln0JLgwbC8m+zpjXEfHqQUReYNa1Lwp1Ws3iwFU7tdIAZQ:uzQnw11gJfbxHtUfTU3Na1A1Ws3iw6G
- TLSH T1536633B076B0E076D0AA1E3DDAE4D2F43E502C62D722828B779D3E1B7BF43519946247
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL