General
- Target 2026-01-22_45c273c8abf1e80bf61d12372a402f0b_amadey_darkgate_elex_magniber_smoke-loader
- Size 10.8MB
- Sample260122-vrqc2shv6a
- SHA256 539a12f51ab3b5a08d1b1af70fa6b567902248f4392c9558b4c115b3b257dd97
- MD5 45c273c8abf1e80bf61d12372a402f0b
- SHA1 8e6b5380e527c879b7af2713eb7d048d23ebedd0
- SHA512 b6d9181aa2754f362ae574788be3b4f20851a663815cced9638066aa0ae7c621a8d8cb3b7fe4365ca795c8488120564a972ff210d79530bc7548c60b610d397d
- SSDEEP 196608:x/FAPnopk5ik69UwjOXviCP6AW4YSUQiDqiFafOiB4E5MgWJBQQduVI:MPnsu6WwjkiCPS4EQ0qiFDiB4E2Fu2
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-01-22_45c273c8abf1e80bf61d12372a402f0b_amadey_darkgate_elex_magniber_smoke-loader.exe
Resource
win10v2004-20251229-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-01-22_45c273c8abf1e80bf61d12372a402f0b_amadey_darkgate_elex_magniber_smoke-loader.exe
Resource
win11-20251231-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-01-22_45c273c8abf1e80bf61d12372a402f0b_amadey_darkgate_elex_magniber_smoke-loader
- Size 10.8MB
- SHA256 539a12f51ab3b5a08d1b1af70fa6b567902248f4392c9558b4c115b3b257dd97
- MD5 45c273c8abf1e80bf61d12372a402f0b
- SHA1 8e6b5380e527c879b7af2713eb7d048d23ebedd0
- SHA512 b6d9181aa2754f362ae574788be3b4f20851a663815cced9638066aa0ae7c621a8d8cb3b7fe4365ca795c8488120564a972ff210d79530bc7548c60b610d397d
- SSDEEP 196608:x/FAPnopk5ik69UwjOXviCP6AW4YSUQiDqiFafOiB4E5MgWJBQQduVI:MPnsu6WwjkiCPS4EQ0qiFDiB4E2Fu2
- MD5 SHA1 SHA512 SSDEEP
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Banload family
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.