General
- Target 2026-04-18_3d5691ed6eb2089cf9bcdd505d5f748a_darkgate_elex_smoke-loader
- Size 1.8MB
- Sample260418-ml58bacy6k
- SHA256 51222024437716b24584db95771ed055de84d2fe15e024548fecb8b9763a4ffb
- MD5 3d5691ed6eb2089cf9bcdd505d5f748a
- SHA1 a13d8028c8600fb542f580a3c84796e0e296ec05
- SHA512 207f9fddc4b88814887a65b99548a7e39f43e56376be96dcae7cd471ade4f4af88744ceee329cbf3b6de5ccf1326f67d03cbc6754cd5269d28121717581efc2c
- SSDEEP 49152:DS7xdZn4KLE1SBixSQWTX9yOK9bnJSEZaSHiJxooSjRiENpX4DjIlq:Yxz4KLTBMWTX9yOK9bnJNZSxoo+iENpI
- TLSH T14785AE3A7651903AD6733631510AE7B8F2AEED304975055BA6A13F3D2E304838E2D76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-18_3d5691ed6eb2089cf9bcdd505d5f748a_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
Targets
-
- Target 2026-04-18_3d5691ed6eb2089cf9bcdd505d5f748a_darkgate_elex_smoke-loader
- Size 1.8MB
- SHA256 51222024437716b24584db95771ed055de84d2fe15e024548fecb8b9763a4ffb
- MD5 3d5691ed6eb2089cf9bcdd505d5f748a
- SHA1 a13d8028c8600fb542f580a3c84796e0e296ec05
- SHA512 207f9fddc4b88814887a65b99548a7e39f43e56376be96dcae7cd471ade4f4af88744ceee329cbf3b6de5ccf1326f67d03cbc6754cd5269d28121717581efc2c
- SSDEEP 49152:DS7xdZn4KLE1SBixSQWTX9yOK9bnJSEZaSHiJxooSjRiENpX4DjIlq:Yxz4KLTBMWTX9yOK9bnJNZSxoo+iENpI
- TLSH T14785AE3A7651903AD6733631510AE7B8F2AEED304975055BA6A13F3D2E304838E2D76F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE