2026-09-30_bc51612e3b2d6bf689730b5946af35d1_amadey_darkgate_elex_floxif_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-30_bc51612e3b2d6bf689730b5946af35d1_amadey_darkgate_elex_floxif_smoke-loader
Size 1.5MB
Sample260930-j229taae64
SHA256 1f3fc4544561f147d8e5e2fb314a5ef1d78dbba2a380dc63d1be186b2e141165
MD5 bc51612e3b2d6bf689730b5946af35d1
SHA1 360e22055a7d73a5e5f6980b1c360f057b4bd76a
SHA512 fb2bd2ee94c4b066540bac9bbf71e39b9b516c8ec0a01c7629da33aa1f2ef792bfbd08833cac4cb457e90458fffe7d3e04c39d5a34ec633b7fb0e5ceee9fd60d
SSDEEP 24576:Ya6ZdpKZ7j/i9oDBcG1THhcmTIHgqM6j86iT/Po20GljGYufOsJrEH7g:f6rpKZYoDBcG1Ty8PoYljGXf5f
TLSH
T115757E1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_bc51612e3b2d6bf689730b5946af35d1_amadey_darkgate_elex_floxif_smoke-loader

File Explorer

2026-09-30_bc51612e3b2d6bf689730b5946af35d1_amadey_darkgate_elex_floxif_smoke-loader

.exe 1.5MB

2026-09-30_bc51612e3b2d6bf689730b5946af35d1_amadey_darkgate_elex_floxif_smoke-loader

IMPHASH 4ec33af08ba7693c393805902e47cadf
SHA256 1f3fc4544561f147d8e5e2fb314a5ef1d78dbba2a380dc63d1be186b2e141165
MD5 bc51612e3b2d6bf689730b5946af35d1
SHA1 360e22055a7d73a5e5f6980b1c360f057b4bd76a
SHA512 fb2bd2ee94c4b066540bac9bbf71e39b9b516c8ec0a01c7629da33aa1f2ef792bfbd08833cac4cb457e90458fffe7d3e04c39d5a34ec633b7fb0e5ceee9fd60d
SSDEEP 24576:Ya6ZdpKZ7j/i9oDBcG1THhcmTIHgqM6j86iT/Po20GljGYufOsJrEH7g:f6rpKZYoDBcG1Ty8PoYljGXf5f
TLSH
T115757E1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1136178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\Users\cc4build\Documents\Visual Studio 2010\Work\Application\ControlCenter\ControlCenter4\Product\Develop\ControlCenter4_DLLFB_BHS15\binary\Release\BrCcUxSys.pdb

comctl32

ord16 PropertySheetW CreatePropertySheetPageW ord17

msimg32

GradientFill AlphaBlend

shlwapi

PathIsDirectoryW PathAddBackslashW PathFileExistsW PathFindFileNameW

kernel32

GetPrivateProfileStringW GetPrivateProfileIntW GetModuleHandleW GetACP GetProcAddress IsValidCodePage MulDiv GetLocaleInfoW GetModuleFileNameW CreateMutexW ReleaseMutex GetCurrentProcess lstrcmpW ConnectNamedPipe CreateNamedPipeW FlushFileBuffers GetFileSize CopyFileW GetFileTime Sleep WaitForSingleObject ReleaseSemaphore CreateSemaphoreW OpenSemaphoreW WideCharToMultiByte LockResource lstrcpynW lstrcatW FreeLibrary LoadLibraryW GetTempFileNameW GetFileAttributesW ExpandEnvironmentStringsA LoadLibraryA GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter HeapDestroy HeapCreate DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetStdHandle IsProcessorFeaturePresent GetStringTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc GetOEMCP InterlockedDecrement InterlockedIncrement GetCPInfo RtlUnwind ExitProcess HeapSize RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation CreateThread ResumeThread ExitThread DecodePointer EncodePointer LoadResource FindResourceW SetFileAttributesW GetCurrentProcessId FileTimeToLocalFileTime GetExitCodeThread CompareStringW FileTimeToSystemTime GetTimeFormatW OpenProcess GetProcessHeap HeapFree HeapAlloc HeapReAlloc InitializeCriticalSection GetLocalTime GetDateFormatW CreateDirectoryW GetFileSizeEx SetFilePointerEx OpenFileMappingW CreateFileMappingW FlushViewOfFile UnmapViewOfFile MapViewOfFile OpenEventW SetEvent GetSystemTime FindNextFileW MoveFileExW GetCurrentThreadId DeleteFileW GetTempPathW lstrcpyW LocalFree SetLastError FormatMessageW lstrcmpiW GetCommandLineW CloseHandle FindClose GetLastError CreateFileW ReadFile WriteFile FindFirstFileW lstrlenW SetFilePointer LCMapStringW SetStdHandle WriteConsoleW SetEndOfFile MultiByteToWideChar

user32

GetClassLongW GetDoubleClickTime SetPropW ReleaseCapture GetPropW AppendMenuW CreatePopupMenu SetMenuDefaultItem DestroyMenu PtInRect InflateRect SetTimer KillTimer GetGuiResources WindowFromPoint SetCapture RemovePropW GetSysColor GetScrollInfo ScrollWindowEx SetScrollInfo DefWindowProcW GetActiveWindow GetClientRect MessageBoxW IsDialogMessageW EndDialog CreateDialogParamW TrackMouseEvent DrawFocusRect GetKeyState PostQuitMessage UpdateWindow AttachThreadInput GetForegroundWindow GetWindowThreadProcessId GetMessageW TrackPopupMenu CheckRadioButton GetSysColorBrush CharUpperW RegisterClassExW UnregisterClassW IsZoomed IsIconic SetWindowTextW GetDesktopWindow GetWindowTextW TranslateMessage DispatchMessageW LoadStringW GetSystemMetrics DestroyWindow GetWindowLongW CreateWindowExW MoveWindow wsprintfW LoadImageW GetWindowPlacement GetAncestor GetDlgItem ShowWindow FindWindowExW SetActiveWindow FindWindowW BringWindowToTop SetWindowPos SetCursor InvalidateRect ScreenToClient GetWindowRect GetParent GetCursorPos DrawTextW GetDC ReleaseDC SetWindowLongW CallWindowProcW EndPaint GetSystemMenu PostMessageW LoadCursorW IsWindowEnabled SetFocus BeginPaint EnableMenuItem IsWindowVisible SendMessageW EnableWindow SetProcessDefaultLayout SetWindowRgn SetForegroundWindow GetWindowTextLengthW DialogBoxParamW

gdi32

CreateCompatibleBitmap CreateDIBSection CreateCompatibleDC DeleteDC GetDIBits SetBkColor GetDeviceCaps SetBkMode CreateBitmap CreateRoundRectRgn CreateRectRgn CombineRgn SetTextColor CreateFontW StretchBlt SetBrushOrgEx SetMapMode StretchDIBits SetStretchBltMode PlgBlt MoveToEx PatBlt LineTo SelectObject CreatePen SetROP2 CreateSolidBrush SetLayout RoundRect GetTextExtentPoint32W GetObjectW GetStockObject BitBlt DeleteObject

winspool.drv

ord203 DocumentPropertiesW

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey CryptAcquireContextW CryptDeriveKey CryptReleaseContext CryptEncrypt CryptCreateHash CryptDecrypt CryptDestroyHash CryptHashData RegQueryValueExA RegOpenKeyExA

shell32

SHAppBarMessage SHGetFileInfoW SHGetSpecialFolderPathW DoEnvironmentSubstW Shell_NotifyIconW SHGetFolderPathW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_bc51612e3b2d6bf689730b5946af35d1_amadey_darkgate_elex_floxif_smoke-loader

comctl32

msimg32

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

generic