2026-09-12_69e93936ab6da53fbd7d0965c968d690_amadey_darkgate_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-12_69e93936ab6da53fbd7d0965c968d690_amadey_darkgate_elex_smoke-loader
Size 37.6MB
Sample260913-aejdracb42
SHA256 1c78f8613d3e654426cdcbdd89c0d98c72c46b0031066092e98f6120b14659ac
MD5 69e93936ab6da53fbd7d0965c968d690
SHA1 431fe43ae58d96aeaceed55a793821b7fbc8776e
SHA512 15251f3144768e466673ccda7e5c60b82a951ddc654382773adec3195a615e0beee8c21f502d7a95c810f806e4f29679bcd4ffbc4a3ff837af38c6eb4a895d83
SSDEEP 786432:2u+4wJWyygwy3a9Z/J+gV8upuTOJzrJOS:5+jWFy3an/suJpuyJnoS
TLSH
T1CD8701C9AA696C7192D77E384F65841A049B5A3927A1F8F37FC3869D81C54E08730FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-12_69e93936ab6da53fbd7d0965c968d690_amadey_darkgate_elex_smoke-loader

File Explorer

2026-09-12_69e93936ab6da53fbd7d0965c968d690_amadey_darkgate_elex_smoke-loader

.exe 37.6MB

2026-09-12_69e93936ab6da53fbd7d0965c968d690_amadey_darkgate_elex_smoke-loader

IMPHASH ace20a751910b10ef6c3150601349824
SHA256 1c78f8613d3e654426cdcbdd89c0d98c72c46b0031066092e98f6120b14659ac
MD5 69e93936ab6da53fbd7d0965c968d690
SHA1 431fe43ae58d96aeaceed55a793821b7fbc8776e
SHA512 15251f3144768e466673ccda7e5c60b82a951ddc654382773adec3195a615e0beee8c21f502d7a95c810f806e4f29679bcd4ffbc4a3ff837af38c6eb4a895d83
SSDEEP 786432:2u+4wJWyygwy3a9Z/J+gV8upuTOJzrJOS:5+jWFy3an/suJpuyJnoS
TLSH
T1CD8701C9AA696C7192D77E384F65841A049B5A3927A1F8F37FC3869D81C54E08730FB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

870124

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathFileExistsW PathCombineW

kernel32

EnumSystemLocalesW LCMapStringEx InitializeCriticalSectionEx SetFilePointer CreateThread FindFirstFileA GetFileAttributesW RaiseException GetCPInfo InitializeCriticalSectionAndSpinCount GetModuleHandleW GetCurrentDirectoryA CreateDirectoryA GetSystemTimeAsFileTime HeapAlloc GetSystemWow64DirectoryW Sleep GetConsoleMode ExitProcess DecodePointer CreateDirectoryW GetLastError GetCommandLineA InitializeSListHead GetTickCount64 SetFileTime TlsGetValue GetFileInformationByHandle SetLastError SetEvent GetCurrentDirectoryW SetFileAttributesA FindClose HeapFree LocalFree GetCurrentProcess CreateEventA DeleteFileA DeleteFileW GetProcessHeap GetEnvironmentStringsW TlsFree GetCommandLineW RtlUnwind LoadLibraryW GetNativeSystemInfo GetOEMCP FreeEnvironmentStringsW DeleteCriticalSection VirtualProtect GetSystemInfo SetFileAttributesW UnhandledExceptionFilter GetCurrentProcessId GetStringTypeW AreFileApisANSI FindFirstFileExW VirtualFree FindNextFileA GetUserDefaultLCID HeapSize RemoveDirectoryA FlushFileBuffers FreeLibrary GetTempPathA GetProcessAffinityMask GetACP RemoveDirectoryW FormatMessageA GlobalMemoryStatus FreeLibraryAndExitThread SetStdHandle MultiByteToWideChar WriteConsoleW GetFileSize GetFileAttributesA IsValidLocale CreateFileA VirtualAlloc QueryPerformanceCounter WideCharToMultiByte GetConsoleOutputCP EnterCriticalSection GetVersionExA SetUnhandledExceptionFilter TlsAlloc GetLocaleInfoW SetEndOfFile CloseHandle LoadLibraryExW ExitThread GetProcAddress lstrlenW CreateSemaphoreA WriteFile GetStdHandle FindFirstFileW GetTempPathW GetStartupInfoW FormatMessageW GetSystemDirectoryW GetModuleHandleExW GetTickCount WaitForSingleObject IsBadReadPtr IsDebuggerPresent GetModuleFileNameW CreateFileW InitializeCriticalSection GetFileType HeapReAlloc IsProcessorFeaturePresent LeaveCriticalSection ReadFile LoadLibraryA GetModuleFileNameA FindNextFileW ReleaseSemaphore EncodePointer SetFilePointerEx TlsSetValue LCMapStringW TerminateProcess GetModuleHandleA IsValidCodePage ResetEvent GetCurrentThreadId lstrcatW

user32

LoadStringA DialogBoxParamW SendMessageA PostMessageA SetWindowTextW DestroyWindow CharUpperA EndDialog GetDlgItem GetWindowLongA LoadIconA MessageBoxW DialogBoxParamA ShowWindow CharUpperW LoadStringW SetWindowTextA SetWindowLongA KillTimer SetTimer

shell32

SHGetSpecialFolderPathW

oleaut32

SysAllocStringLen SysStringLen VariantClear

advapi32

RegOpenKeyExW RegCreateKeyExW RegCloseKey RegSetValueExW

ole32

CoInitialize CoCreateInstance CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-12_69e93936ab6da53fbd7d0965c968d690_amadey_darkgate_elex_smoke-loader

shlwapi

kernel32

user32

shell32

oleaut32

advapi32

ole32

generic