2026-10-17_d569be1593f8b76f6b151ca1fb34395d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
Classification: Malicious
2026-10-17_d569be1593f8b76f6b151ca1fb34395d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop is a trojan. Detected by 60 antivirus engines.
Detection summary
- 60 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Systex |
Triage |
2026-10-18 04:51:44 |
2026-10-18 04:51:44 |
malicious-activity
|
|
Tags
systex
adware
discovery
spyware
trojan
Sample information
- Filenames
- 2026-10-17_d569be1593f8b76f6b151ca1fb34395d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- SHA-256
0dd2b7692f099052ac02de41dceb6c1a7e12fce89543cb53902797db080e092d
- First indexed
- 2026-10-18 04:51:44
- Last updated
- 2026-10-18 04:51:44
Antivirus detections
| Engine | Detection |
| ALYac | Gen:Variant.Ransom.LockBit.130 |
| APEX | Malicious |
| AVG | Win32:Agent-AUSD [Rtk] |
| Acronis | suspicious |
| AhnLab-V3 | Dropper/Win.Generic.R711439 |
| Antiy-AVL | Trojan/Win32.Tiny |
| Arcabit | Trojan.Ransom.LockBit.130 |
| Avast | Win32:Agent-AUSD [Rtk] |
| Avira | RKIT/BOO.Backboot.D |
| BitDefender | Gen:Variant.Ransom.LockBit.130 |
| Bkav | W32.Malware.9E7C5454 |
| CAT-QuickHeal | Trojan.Mauvaise.SL1 |
| CTX | exe.ransomware.lockbit |
| ClamAV | Win.Malware.Mikey-9949492-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.NtRootKit.14723 |
| ESET-NOD32 | Win32/Agent.PGA trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Ransom.LockBit.130 (B) |
| F-Secure | Trojan.RKIT/BOO.Backboot.D |
| Fortinet | W32/Agent.PGA!tr |
| GData | Win32.Trojan.PSE.15DG45C |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Agent.oa!s1 |
| Ikarus | Trojan.Win32.Webprefix |
| Jiangmin | Trojan.Tiny.kg |
| K7AntiVirus | Trojan ( 005565241 ) |
| K7GW | Trojan ( 005565241 ) |
| Kaspersky | Trojan.Win32.Tiny.cm |
| Kingsoft | malware.kb.a.994 |
| Lionic | Trojan.Win32.Tiny.tsRk |
| Malwarebytes | Trojan.Dropper |
| McAfeeD | Real Protect-LS!D569BE1593F8 |
| MicroWorld-eScan | Gen:Variant.Ransom.LockBit.130 |
| Microsoft | TrojanDropper:Win32/Systex!pz |
| NANO-Antivirus | Trojan.Win32.Tiny.kycpxq |
| Panda | Trj/GdSda.A |
| Rising | Trojan.Agent!1.C16F (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/GenericKD |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.fh |
| Sophos | Troj/Agent-AHOA |
| Symantec | Trojan.Wanbag!g1 |
| Tencent | Trojan.Win32.Nthook.a |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericRXAC-YK!D569BE1593F8 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CAJ |
| VBA32 | TrojanDropper.Systex |
| VIPRE | Gen:Variant.Ransom.LockBit.130 |
| Varist | W32/Agent.MNVH-5619 |
| VirIT | Trojan.Win32.Generic.BPPW |
| Yandex | Trojan.GenAsa!fCPsWhzUnE4 |
| ZoneAlarm | Troj/Agent-AHOA |
| alibabacloud | Rootkit:Win/Systex |
| huorong | Trojan/SysTrex |
| tehtris | Generic.Malware |