2026-10-10_42bc9ab5abe8d455c8be2f22e53e0681_amadey_darkgate_elex_floxif_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_42bc9ab5abe8d455c8be2f22e53e0681_amadey_darkgate_elex_floxif_smoke-loader
Size 1.5MB
Sample261011-ta3flsbs21
SHA256 ab76c3ab9b90a1c47c3f3531cf3922ad725c8212d92a8f9b52aa739000c99f80
MD5 42bc9ab5abe8d455c8be2f22e53e0681
SHA1 40e4dbdd84320f80b53e8c521cff5d4523a36dba
SHA512 e0e671837509f1485df7e3bf32e1d246ede950b5b5286fc3b5a3a15a86928c7da23657b53043ebf9638dc00fd3d4dcfbae98f74ca74fe8735e107a9cfd7a3bca
SSDEEP 24576:Ya6ZdpKZ7j/i9oDBcG1TFMcmTIHgqM6j86iT/Co20GljGYufOsJrEH7dS:f6rpKZYoDBcG1T/8CoYljGXf5L
TLSH
T11A757E1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_42bc9ab5abe8d455c8be2f22e53e0681_amadey_darkgate_elex_floxif_smoke-loader

File Explorer

2026-10-10_42bc9ab5abe8d455c8be2f22e53e0681_amadey_darkgate_elex_floxif_smoke-loader

.exe 1.5MB

2026-10-10_42bc9ab5abe8d455c8be2f22e53e0681_amadey_darkgate_elex_floxif_smoke-loader

IMPHASH 4ec33af08ba7693c393805902e47cadf
SHA256 ab76c3ab9b90a1c47c3f3531cf3922ad725c8212d92a8f9b52aa739000c99f80
MD5 42bc9ab5abe8d455c8be2f22e53e0681
SHA1 40e4dbdd84320f80b53e8c521cff5d4523a36dba
SHA512 e0e671837509f1485df7e3bf32e1d246ede950b5b5286fc3b5a3a15a86928c7da23657b53043ebf9638dc00fd3d4dcfbae98f74ca74fe8735e107a9cfd7a3bca
SSDEEP 24576:Ya6ZdpKZ7j/i9oDBcG1TFMcmTIHgqM6j86iT/Co20GljGYufOsJrEH7dS:f6rpKZYoDBcG1T/8CoYljGXf5L
TLSH
T11A757E1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1136178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\Users\cc4build\Documents\Visual Studio 2010\Work\Application\ControlCenter\ControlCenter4\Product\Develop\ControlCenter4_DLLFB_BHS15\binary\Release\BrCcUxSys.pdb

comctl32

ord16 PropertySheetW CreatePropertySheetPageW ord17

msimg32

GradientFill AlphaBlend

shlwapi

PathIsDirectoryW PathAddBackslashW PathFileExistsW PathFindFileNameW

kernel32

GetPrivateProfileStringW GetPrivateProfileIntW GetModuleHandleW GetACP GetProcAddress IsValidCodePage MulDiv GetLocaleInfoW GetModuleFileNameW CreateMutexW ReleaseMutex GetCurrentProcess lstrcmpW ConnectNamedPipe CreateNamedPipeW FlushFileBuffers GetFileSize CopyFileW GetFileTime Sleep WaitForSingleObject ReleaseSemaphore CreateSemaphoreW OpenSemaphoreW WideCharToMultiByte LockResource lstrcpynW lstrcatW FreeLibrary LoadLibraryW GetTempFileNameW GetFileAttributesW ExpandEnvironmentStringsA LoadLibraryA GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter HeapDestroy HeapCreate DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetStdHandle IsProcessorFeaturePresent GetStringTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc GetOEMCP InterlockedDecrement InterlockedIncrement GetCPInfo RtlUnwind ExitProcess HeapSize RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation CreateThread ResumeThread ExitThread DecodePointer EncodePointer LoadResource FindResourceW SetFileAttributesW GetCurrentProcessId FileTimeToLocalFileTime GetExitCodeThread CompareStringW FileTimeToSystemTime GetTimeFormatW OpenProcess GetProcessHeap HeapFree HeapAlloc HeapReAlloc InitializeCriticalSection GetLocalTime GetDateFormatW CreateDirectoryW GetFileSizeEx SetFilePointerEx OpenFileMappingW CreateFileMappingW FlushViewOfFile UnmapViewOfFile MapViewOfFile OpenEventW SetEvent GetSystemTime FindNextFileW MoveFileExW GetCurrentThreadId DeleteFileW GetTempPathW lstrcpyW LocalFree SetLastError FormatMessageW lstrcmpiW GetCommandLineW CloseHandle FindClose GetLastError CreateFileW ReadFile WriteFile FindFirstFileW lstrlenW SetFilePointer LCMapStringW SetStdHandle WriteConsoleW SetEndOfFile MultiByteToWideChar

user32

GetClassLongW GetDoubleClickTime SetPropW ReleaseCapture GetPropW AppendMenuW CreatePopupMenu SetMenuDefaultItem DestroyMenu PtInRect InflateRect SetTimer KillTimer GetGuiResources WindowFromPoint SetCapture RemovePropW GetSysColor GetScrollInfo ScrollWindowEx SetScrollInfo DefWindowProcW GetActiveWindow GetClientRect MessageBoxW IsDialogMessageW EndDialog CreateDialogParamW TrackMouseEvent DrawFocusRect GetKeyState PostQuitMessage UpdateWindow AttachThreadInput GetForegroundWindow GetWindowThreadProcessId GetMessageW TrackPopupMenu CheckRadioButton GetSysColorBrush CharUpperW RegisterClassExW UnregisterClassW IsZoomed IsIconic SetWindowTextW GetDesktopWindow GetWindowTextW TranslateMessage DispatchMessageW LoadStringW GetSystemMetrics DestroyWindow GetWindowLongW CreateWindowExW MoveWindow wsprintfW LoadImageW GetWindowPlacement GetAncestor GetDlgItem ShowWindow FindWindowExW SetActiveWindow FindWindowW BringWindowToTop SetWindowPos SetCursor InvalidateRect ScreenToClient GetWindowRect GetParent GetCursorPos DrawTextW GetDC ReleaseDC SetWindowLongW CallWindowProcW EndPaint GetSystemMenu PostMessageW LoadCursorW IsWindowEnabled SetFocus BeginPaint EnableMenuItem IsWindowVisible SendMessageW EnableWindow SetProcessDefaultLayout SetWindowRgn SetForegroundWindow GetWindowTextLengthW DialogBoxParamW

gdi32

CreateCompatibleBitmap CreateDIBSection CreateCompatibleDC DeleteDC GetDIBits SetBkColor GetDeviceCaps SetBkMode CreateBitmap CreateRoundRectRgn CreateRectRgn CombineRgn SetTextColor CreateFontW StretchBlt SetBrushOrgEx SetMapMode StretchDIBits SetStretchBltMode PlgBlt MoveToEx PatBlt LineTo SelectObject CreatePen SetROP2 CreateSolidBrush SetLayout RoundRect GetTextExtentPoint32W GetObjectW GetStockObject BitBlt DeleteObject

winspool.drv

ord203 DocumentPropertiesW

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey CryptAcquireContextW CryptDeriveKey CryptReleaseContext CryptEncrypt CryptCreateHash CryptDecrypt CryptDestroyHash CryptHashData RegQueryValueExA RegOpenKeyExA

shell32

SHAppBarMessage SHGetFileInfoW SHGetSpecialFolderPathW DoEnvironmentSubstW Shell_NotifyIconW SHGetFolderPathW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_42bc9ab5abe8d455c8be2f22e53e0681_amadey_darkgate_elex_floxif_smoke-loader

comctl32

msimg32

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

generic