2026-10-28_2f3153aca730b87468dce58d799094ab_darkgate_elex_rhadamanthys_smoke-loader

General

Target
2026-10-28_2f3153aca730b87468dce58d799094ab_darkgate_elex_rhadamanthys_smoke-loader
Size 2.4MB
Sample261030-jbvr2sav3x
SHA256 155217d549464f02344d4801a43f170de63b8a347630e4d7bfb78e19809cf2c9
MD5 2f3153aca730b87468dce58d799094ab
SHA1 cad764a354343b8f93b4b71d80f0a1d3d5f84137
SHA512 74c6f71754a99bdca303485b47df7cd6b57a72af781dc6080d8c976ca830f0cb3f05e78ab21188271e2f34f7290a031c39a47408277907e0268abea175a651af
SSDEEP 49152:614v+V8tgJd8xA0vbFqnstLet3LyvDzx:AG+CgaxAOZqnstLEoDF
TLSH
T1B0C5B120AAFF5722EC74F5309F7C425804643E949EE1C21AB650F66DE93B129783F627
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_2f3153aca730b87468dce58d799094ab_darkgate_elex_rhadamanthys_smoke-loader

File Explorer

2026-10-28_2f3153aca730b87468dce58d799094ab_darkgate_elex_rhadamanthys_smoke-loader

.exe 2.4MB

2026-10-28_2f3153aca730b87468dce58d799094ab_darkgate_elex_rhadamanthys_smoke-loader

SHA256 155217d549464f02344d4801a43f170de63b8a347630e4d7bfb78e19809cf2c9
MD5 2f3153aca730b87468dce58d799094ab
SHA1 cad764a354343b8f93b4b71d80f0a1d3d5f84137
SHA512 74c6f71754a99bdca303485b47df7cd6b57a72af781dc6080d8c976ca830f0cb3f05e78ab21188271e2f34f7290a031c39a47408277907e0268abea175a651af
SSDEEP 49152:614v+V8tgJd8xA0vbFqnstLet3LyvDzx:AG+CgaxAOZqnstLEoDF
TLSH
T1B0C5B120AAFF5722EC74F5309F7C425804643E949EE1C21AB650F66DE93B129783F627
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

216944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=257, version=28117,

count=13, id=260, version=28117,

count=10, id=259, version=28117,

count=2, id=257, productName=VS2019 v16.4.4 build 28316, version=28316,

count=2, id=260, version=26715,

count=1, id=262, version=26715,

count=17, id=257, version=26715,

count=294, id=1, productName=Unmarked objects,

count=41, id=261, version=28117,

count=17, id=125, productName=VS2005 build 50727, version=50727,

count=98, id=109, productName=VS2005 build 50727, version=50727,

count=28, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=1, id=260, productName=VS2019 v16.4.4 build 28316, version=28316,

count=1, id=255, productName=VS2019 v16.4.4 build 28316, version=28316,

count=1, id=151,

count=1, id=258, productName=VS2019 v16.4.4 build 28316, version=28316,

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_2f3153aca730b87468dce58d799094ab_darkgate_elex_rhadamanthys_smoke-loader

generic