2026-10-02_fe94e5121ee88af5e901b4cb738ccc49_amadey_darkgate_elex_floxif_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_fe94e5121ee88af5e901b4cb738ccc49_amadey_darkgate_elex_floxif_smoke-loader
Size 1.5MB
Sample261002-1axnpatdkd
SHA256 d59acaf9042cee522fcb3d872467da0e175323bf5d5db16d3b0bf57a5162df98
MD5 fe94e5121ee88af5e901b4cb738ccc49
SHA1 278d3ed2bfd82922af42d60f435921bf5b74603f
SHA512 aad2fface862de8a7a662ae32d78e1340a3d829cfa1e1d4a979123abb7c0ff85654a7ead6524ac4462c1668d37cce7fe5040061d3681b22aef3445b8693703f4
SSDEEP 24576:Ya6ZdpKZ7j/i9oDBcG1TFhcmTIHgsM6j86iT/jo20GljGYufOsJrEH70:f6rpKZYoDBcG1T+8joYljGXf5n
TLSH
T142757D1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_fe94e5121ee88af5e901b4cb738ccc49_amadey_darkgate_elex_floxif_smoke-loader

File Explorer

2026-10-02_fe94e5121ee88af5e901b4cb738ccc49_amadey_darkgate_elex_floxif_smoke-loader

.exe 1.5MB

2026-10-02_fe94e5121ee88af5e901b4cb738ccc49_amadey_darkgate_elex_floxif_smoke-loader

IMPHASH 4ec33af08ba7693c393805902e47cadf
SHA256 d59acaf9042cee522fcb3d872467da0e175323bf5d5db16d3b0bf57a5162df98
MD5 fe94e5121ee88af5e901b4cb738ccc49
SHA1 278d3ed2bfd82922af42d60f435921bf5b74603f
SHA512 aad2fface862de8a7a662ae32d78e1340a3d829cfa1e1d4a979123abb7c0ff85654a7ead6524ac4462c1668d37cce7fe5040061d3681b22aef3445b8693703f4
SSDEEP 24576:Ya6ZdpKZ7j/i9oDBcG1TFhcmTIHgsM6j86iT/jo20GljGYufOsJrEH70:f6rpKZYoDBcG1T+8joYljGXf5n
TLSH
T142757D1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1136178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\Users\cc4build\Documents\Visual Studio 2010\Work\Application\ControlCenter\ControlCenter4\Product\Develop\ControlCenter4_DLLFB_BHS15\binary\Release\BrCcUxSys.pdb

comctl32

ord16 PropertySheetW CreatePropertySheetPageW ord17

msimg32

GradientFill AlphaBlend

shlwapi

PathIsDirectoryW PathAddBackslashW PathFileExistsW PathFindFileNameW

kernel32

GetPrivateProfileStringW GetPrivateProfileIntW GetModuleHandleW GetACP GetProcAddress IsValidCodePage MulDiv GetLocaleInfoW GetModuleFileNameW CreateMutexW ReleaseMutex GetCurrentProcess lstrcmpW ConnectNamedPipe CreateNamedPipeW FlushFileBuffers GetFileSize CopyFileW GetFileTime Sleep WaitForSingleObject ReleaseSemaphore CreateSemaphoreW OpenSemaphoreW WideCharToMultiByte LockResource lstrcpynW lstrcatW FreeLibrary LoadLibraryW GetTempFileNameW GetFileAttributesW ExpandEnvironmentStringsA LoadLibraryA GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter HeapDestroy HeapCreate DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetStdHandle IsProcessorFeaturePresent GetStringTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc GetOEMCP InterlockedDecrement InterlockedIncrement GetCPInfo RtlUnwind ExitProcess HeapSize RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation CreateThread ResumeThread ExitThread DecodePointer EncodePointer LoadResource FindResourceW SetFileAttributesW GetCurrentProcessId FileTimeToLocalFileTime GetExitCodeThread CompareStringW FileTimeToSystemTime GetTimeFormatW OpenProcess GetProcessHeap HeapFree HeapAlloc HeapReAlloc InitializeCriticalSection GetLocalTime GetDateFormatW CreateDirectoryW GetFileSizeEx SetFilePointerEx OpenFileMappingW CreateFileMappingW FlushViewOfFile UnmapViewOfFile MapViewOfFile OpenEventW SetEvent GetSystemTime FindNextFileW MoveFileExW GetCurrentThreadId DeleteFileW GetTempPathW lstrcpyW LocalFree SetLastError FormatMessageW lstrcmpiW GetCommandLineW CloseHandle FindClose GetLastError CreateFileW ReadFile WriteFile FindFirstFileW lstrlenW SetFilePointer LCMapStringW SetStdHandle WriteConsoleW SetEndOfFile MultiByteToWideChar

user32

GetClassLongW GetDoubleClickTime SetPropW ReleaseCapture GetPropW AppendMenuW CreatePopupMenu SetMenuDefaultItem DestroyMenu PtInRect InflateRect SetTimer KillTimer GetGuiResources WindowFromPoint SetCapture RemovePropW GetSysColor GetScrollInfo ScrollWindowEx SetScrollInfo DefWindowProcW GetActiveWindow GetClientRect MessageBoxW IsDialogMessageW EndDialog CreateDialogParamW TrackMouseEvent DrawFocusRect GetKeyState PostQuitMessage UpdateWindow AttachThreadInput GetForegroundWindow GetWindowThreadProcessId GetMessageW TrackPopupMenu CheckRadioButton GetSysColorBrush CharUpperW RegisterClassExW UnregisterClassW IsZoomed IsIconic SetWindowTextW GetDesktopWindow GetWindowTextW TranslateMessage DispatchMessageW LoadStringW GetSystemMetrics DestroyWindow GetWindowLongW CreateWindowExW MoveWindow wsprintfW LoadImageW GetWindowPlacement GetAncestor GetDlgItem ShowWindow FindWindowExW SetActiveWindow FindWindowW BringWindowToTop SetWindowPos SetCursor InvalidateRect ScreenToClient GetWindowRect GetParent GetCursorPos DrawTextW GetDC ReleaseDC SetWindowLongW CallWindowProcW EndPaint GetSystemMenu PostMessageW LoadCursorW IsWindowEnabled SetFocus BeginPaint EnableMenuItem IsWindowVisible SendMessageW EnableWindow SetProcessDefaultLayout SetWindowRgn SetForegroundWindow GetWindowTextLengthW DialogBoxParamW

gdi32

CreateCompatibleBitmap CreateDIBSection CreateCompatibleDC DeleteDC GetDIBits SetBkColor GetDeviceCaps SetBkMode CreateBitmap CreateRoundRectRgn CreateRectRgn CombineRgn SetTextColor CreateFontW StretchBlt SetBrushOrgEx SetMapMode StretchDIBits SetStretchBltMode PlgBlt MoveToEx PatBlt LineTo SelectObject CreatePen SetROP2 CreateSolidBrush SetLayout RoundRect GetTextExtentPoint32W GetObjectW GetStockObject BitBlt DeleteObject

winspool.drv

ord203 DocumentPropertiesW

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey CryptAcquireContextW CryptDeriveKey CryptReleaseContext CryptEncrypt CryptCreateHash CryptDecrypt CryptDestroyHash CryptHashData RegQueryValueExA RegOpenKeyExA

shell32

SHAppBarMessage SHGetFileInfoW SHGetSpecialFolderPathW DoEnvironmentSubstW Shell_NotifyIconW SHGetFolderPathW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_fe94e5121ee88af5e901b4cb738ccc49_amadey_darkgate_elex_floxif_smoke-loader

comctl32

msimg32

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

generic