Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 13:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_25d8203f1da34330566ce9f90dfa09fd_darkgate_hijackloader_remcos_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_25d8203f1da34330566ce9f90dfa09fd_darkgate_hijackloader_remcos_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-24_25d8203f1da34330566ce9f90dfa09fd_darkgate_hijackloader_remcos_rhadamanthys_smoke-loader_stealc_tofsee.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-24_25d8203f1da34330566ce9f90dfa09fd_darkgate_hijackloader_remcos_rhadamanthys_smoke-loader_stealc_tofsee.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-24_25d8203f1da34330566ce9f90dfa09fd_darkgate_hijackloader_remcos_rhadamanthys_smoke-loader_stealc_tofsee.exe
- Size 600KB
- Sample260925-qjdl3aed34
- SHA256 e0d6bdfc32b0638ce1dcc51033399253ffe491d0a4182137fff938897b31287d
- MD5 25d8203f1da34330566ce9f90dfa09fd
- SHA1 30e4b23542ad231841d7cf7aac5b164deb9e5d59
- SHA512 a167b247bb553ce3db74bcbe369ecee9ef3bf6e2413be834ee6c5fb0ba0939dcedab863fb67fd6ef4388f5df047349f91db094f08cd5c9442c442bc034563291
- SSDEEP 12288:dflGXd4OvXkLG+nMwHskY7gEZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA4:d9GmA0RMysZg58AKA5ann
- TLSH T17FD4183292F19632F96230B155AB657AA59DED301B84D4CFB7C4BC613A322C3F276319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10