2026-10-10_3f493fda77d367fac84faa57dc7aa2da_amadey_darkgate_elex_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_3f493fda77d367fac84faa57dc7aa2da_amadey_darkgate_elex_rhadamanthys_smoke-loader
Size 212KB
Sample261011-tp24dsda59
SHA256 be04d7d8451325f9bf34744e207c182c6b1a249325b90dbd5b1025a05fc3fbb7
MD5 3f493fda77d367fac84faa57dc7aa2da
SHA1 581c3d9d2c3b5af790f8846883de5846baea1bf4
SHA512 d6b374babe003250961ca0fb9ba53363ba09e41e6ba629c97f21e9598eef1e6be96221cff6ef761103ed9264967ce88a3f513e308420458c1c29c82d28a961cf
SSDEEP 3072:eq+gqzOzoBCExjSVzTFh7nKYG/Q8SVoefM2kOdz0RmZ0FCIMDhr2injqxKXdKJ5K:5+geOzECENSd8SC2pdwRk/IMUWQKS4
TLSH
T13E249D317AA0C172E4E3113585FDAAB1693DE6311738C4C7BB441B9E6D307D2AAB9387
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_3f493fda77d367fac84faa57dc7aa2da_amadey_darkgate_elex_rhadamanthys_smoke-loader

File Explorer

2026-10-10_3f493fda77d367fac84faa57dc7aa2da_amadey_darkgate_elex_rhadamanthys_smoke-loader

.exe 212KB

2026-10-10_3f493fda77d367fac84faa57dc7aa2da_amadey_darkgate_elex_rhadamanthys_smoke-loader

IMPHASH 5e3ce2eed99c49477aed11aea6091114
SHA256 be04d7d8451325f9bf34744e207c182c6b1a249325b90dbd5b1025a05fc3fbb7
MD5 3f493fda77d367fac84faa57dc7aa2da
SHA1 581c3d9d2c3b5af790f8846883de5846baea1bf4
SHA512 d6b374babe003250961ca0fb9ba53363ba09e41e6ba629c97f21e9598eef1e6be96221cff6ef761103ed9264967ce88a3f513e308420458c1c29c82d28a961cf
SSDEEP 3072:eq+gqzOzoBCExjSVzTFh7nKYG/Q8SVoefM2kOdz0RmZ0FCIMDhr2injqxKXdKJ5K:5+geOzECENSd8SC2pdwRk/IMUWQKS4
TLSH
T13E249D317AA0C172E4E3113585FDAAB1693DE6311738C4C7BB441B9E6D307D2AAB9387
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\clr\binaries\x86ret\bin\i386\VSSetup\Utils\boxstub.pdb

advapi32

CreateWellKnownSid InitializeSecurityDescriptor SetEntriesInAclW SetSecurityDescriptorDacl SetSecurityDescriptorOwner CryptAcquireContextW CryptGenRandom CryptReleaseContext DecryptFileW

kernel32

CreateProcessW Sleep WaitForSingleObject GetExitCodeProcess CloseHandle SetFileAttributesW InitializeCriticalSection CreateEventW CreateThread DeleteCriticalSection EnterCriticalSection ExpandEnvironmentStringsW SetEvent GetCommandLineW lstrlenW CompareStringW LocalFree CreateDirectoryW QueryDosDeviceW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetDriveTypeW CreateFileW DeviceIoControl SetErrorMode RemoveDirectoryW MoveFileExW LoadLibraryW GetProcAddress GetSystemDirectoryW GetVersion GetLastError SetEnvironmentVariableW ExitThread GetTickCount GetEnvironmentVariableW GetModuleHandleW LeaveCriticalSection WaitForMultipleObjects ResetEvent CreateEventA GetSystemInfo FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime SetEndOfFile DuplicateHandle ReadFile GetCommandLineA HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc LCMapStringW RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeW HeapSize HeapReAlloc IsProcessorFeaturePresent SetStdHandle WriteConsoleW FlushFileBuffers CreateFileA GetLocalTime GetComputerNameW lstrlenA FormatMessageW GetSystemTime GetTimeZoneInformation SystemTimeToTzSpecificLocalTime DeleteFileW GetFileAttributesW FindFirstFileW FindNextFileW FindClose GetCurrentDirectoryW SetCurrentDirectoryW GetProcessHeap GlobalAlloc GlobalFree SetFilePointerEx RaiseException

comctl32

ord17

rpcrt4

UuidCreate UuidToStringW RpcStringFreeW

shell32

SHBrowseForFolderW SHGetPathFromIDListW CommandLineToArgvW

shlwapi

PathRemoveExtensionW

user32

GetTopWindow GetWindowThreadProcessId GetWindow SendMessageW MessageBoxW PostMessageW DialogBoxParamW GetDlgItem SetWindowTextW EndDialog PostQuitMessage SetWindowLongW GetWindowLongW LoadStringW CharUpperW

cabinet

ord22 ord23 ord20

oleaut32

VariantClear SysAllocString

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_3f493fda77d367fac84faa57dc7aa2da_amadey_darkgate_elex_rhadamanthys_smoke-loader

advapi32

kernel32

comctl32

rpcrt4

shell32

shlwapi

user32

cabinet

oleaut32

version

generic