General
- Target 2026-09-29_11e79304bb3abfae27fc897931e5eb19_amadey_darkgate_elex_gcleaner_remcos_smoke-loader_stop
- Size 12.3MB
- Sample260930-3x2x2ayajc
- SHA256 7730ef4fb3a22c08cdaf3d8860dfaae483e5478e3676f1bb506ceaa445242720
- MD5 11e79304bb3abfae27fc897931e5eb19
- SHA1 b996e440deae8fb5f57b2bd7c907ed481e0575f5
- SHA512 04719dc9f358696d3f110f04b2748d2c01e86b784d0f4738ad28b77f52b166a8081d535ac04eae4cbcf3976bbd6b4d1a58d284a4f29389230ff0bd247fbbba0c
- SSDEEP 393216:bQgiCZ+LMZNkhg4V1wKMcEYAJ9s3bFdUl0Ee:bQ5C4LMnF4V1w7Yms3Al4
- TLSH T1EFD62321FAE540B2D4966C7A4582C7348B347E901B166AE77FE81F0F7B54DC16E3222B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-29_11e79304bb3abfae27fc897931e5eb19_amadey_darkgate_elex_gcleaner_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_11e79304bb3abfae27fc897931e5eb19_amadey_darkgate_elex_gcleaner_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_11e79304bb3abfae27fc897931e5eb19_amadey_darkgate_elex_gcleaner_remcos_smoke-loader_stop
- Size 12.3MB
- SHA256 7730ef4fb3a22c08cdaf3d8860dfaae483e5478e3676f1bb506ceaa445242720
- MD5 11e79304bb3abfae27fc897931e5eb19
- SHA1 b996e440deae8fb5f57b2bd7c907ed481e0575f5
- SHA512 04719dc9f358696d3f110f04b2748d2c01e86b784d0f4738ad28b77f52b166a8081d535ac04eae4cbcf3976bbd6b4d1a58d284a4f29389230ff0bd247fbbba0c
- SSDEEP 393216:bQgiCZ+LMZNkhg4V1wKMcEYAJ9s3bFdUl0Ee:bQ5C4LMnF4V1w7Yms3Al4
- TLSH T1EFD62321FAE540B2D4966C7A4582C7348B347E901B166AE77FE81F0F7B54DC16E3222B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects packed executables observed in Molerats
-
UPX dump on OEP (original entry point)
-
Loads dropped DLL