2026-02-21_094d6a7d8c588526a39b175b391e12d2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
Classification: Malicious
2026-02-21_094d6a7d8c588526a39b175b391e12d2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop is a malicious file sample. Detected by 57 antivirus engines.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Systex |
Triage |
2026-02-21 05:32:55 |
2026-02-21 05:32:55 |
malicious-activity
|
|
Tags
systex
adware
discovery
spyware
trojan
Sample information
- Filenames
- 2026-02-21_094d6a7d8c588526a39b175b391e12d2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- MD5
094d6a7d8c588526a39b175b391e12d2- SHA-1
77cb583aa974616dbab8ebe8bcd9dd656b83040b- SHA-256
72e7a243a373dd1ca3b0d3821c4470c127954a263eb36c49686510f7eb7a9983- SHA-512
9ad843ea23058ca4e0058253380bea38e48bfa23b0e72e02fada6a1706e3d9abec1235291636f85442f9963348f4c56b185615f572c7595f94c6658737240193- First indexed
- 2026-02-21 05:32:55
- Last updated
- 2026-09-03 01:03:47
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Gen:Variant.Ransom.LockBit.130 |
| APEX | Malicious |
| AVG | Win32:Agent-AUSD [Rtk] |
| AhnLab-V3 | Dropper/Win.Generic.R711439 |
| Antiy-AVL | Trojan/Win32.Tiny |
| Arcabit | Trojan.Ransom.LockBit.130 |
| Avast | Win32:Agent-AUSD [Rtk] |
| Avira | TR/Rogue.7909438 |
| Baidu | Win32.Rootkit.Agent.w |
| BitDefender | Gen:Variant.Ransom.LockBit.130 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Mauvaise.SL1 |
| CTX | exe.ransomware.lockbit |
| ClamAV | Win.Malware.Mikey-9949492-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.NtRootKit.14723 |
| ESET-NOD32 | Win32/Agent.PGA trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Ransom.LockBit.130 (B) |
| F-Secure | Trojan.TR/Rogue.7909438 |
| Fortinet | W32/Agent.PGA!tr |
| GData | Win32.Trojan.PSE1.YSVY3N |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Agent.oa!s1 |
| Ikarus | Trojan.Win32.Webprefix |
| Jiangmin | Trojan.Tiny.kg |
| K7AntiVirus | Trojan ( 005565241 ) |
| K7GW | Trojan ( 005565241 ) |
| Kaspersky | Trojan.Win32.Tiny.cm |
| Kingsoft | malware.kb.a.992 |
| Lionic | Trojan.Win32.Tiny.tsRk |
| Malwarebytes | Trojan.Dropper |
| McAfeeD | Real Protect-LS!094D6A7D8C58 |
| MicroWorld-eScan | Gen:Variant.Ransom.LockBit.130 |
| Microsoft | TrojanDropper:Win32/Systex!pz |
| NANO-Antivirus | Trojan.Win32.Tiny.kycpxq |
| Panda | Trj/Genetic.gen |
| SUPERAntiSpyware | Trojan.Agent/GenericKD |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Troj/Agent-AHOA |
| Tencent | Trojan.Win32.Nthook.a |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericRXAC-YK!094D6A7D8C58 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9z |
| VBA32 | TrojanDropper.Systex |
| VIPRE | Gen:Variant.Ransom.LockBit.130 |
| Varist | W32/Agent.MNVH-5619 |
| VirIT | Trojan.Win32.Generic.BPPW |
| Yandex | Trojan.GenAsa!fCPsWhzUnE4 |
| Zillya | Trojan.Tiny.Win32.36722 |
| ZoneAlarm | Troj/Agent-AHOA |
| alibabacloud | Rootkit:Win/Systex |
| huorong | Trojan/SysTrex |