Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    20/04/2026, 09:49

General

  • Target
    2026-04-15_c98fdbb43ff3432cc027ba3f05bdc4bf_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
  • Size 3.2MB
  • Sample260420-ltff7aez7l
  • SHA256 9ec67868a9ddbb84107586f815259d098880f1dddf2281cb45ad63195328c0e2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-04-15_c98fdbb43ff3432cc027ba3f05bdc4bf_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-04-15_c98fdbb43ff3432cc027ba3f05bdc4bf_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
    1⤵
      PID:3376

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3376-0-0x00007FFBB8065000-0x00007FFBB8066000-memory.dmp

          memory/3376-1-0x0000000000F10000-0x0000000000F30000-memory.dmp

          memory/3376-2-0x000000001BD30000-0x000000001C104000-memory.dmp

          memory/3376-3-0x00007FFBB7DB0000-0x00007FFBB8751000-memory.dmp

          memory/3376-4-0x000000001C350000-0x000000001C486000-memory.dmp

          memory/3376-5-0x00007FFBB7DB0000-0x00007FFBB8751000-memory.dmp

          memory/3376-6-0x000000001CB50000-0x000000001D01E000-memory.dmp

          memory/3376-7-0x000000001D0C0000-0x000000001D15C000-memory.dmp

          memory/3376-8-0x00007FFBB7DB0000-0x00007FFBB8751000-memory.dmp

          memory/3376-9-0x00007FFBB7DB0000-0x00007FFBB8751000-memory.dmp

          memory/3376-10-0x00007FFBB7DB0000-0x00007FFBB8751000-memory.dmp

          memory/3376-12-0x0000000000ED0000-0x0000000000EDC000-memory.dmp

          memory/3376-13-0x000000001B7B0000-0x000000001B94A000-memory.dmp

          memory/3376-14-0x00007FFBB7DB0000-0x00007FFBB8751000-memory.dmp