General
- Target 2026-04-22_1372a406b72cc36807958cc2faaedc26_amadey_darkgate_elex_smoke-loader
- Size 87KB
- Sample260422-czzbtabv51
- SHA256 f22ed87bcdbf53bc3a7ac51762837e04614ecc3dcf7e7d92dc6430568d41b9b7
- MD5 1372a406b72cc36807958cc2faaedc26
- SHA1 47dd91a7ba9603c54f5846db18a04a3662217dd1
- SHA512 f6940c10ce26dfb655776003de24c263fdcd4be490be7cf921e112ef779343900bae6832bfc75bd207a6bbb6afdd4cc314a44894673415d83b4d10c11e5e5aa2
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTi9:wCCSUacxmurlg0v4iRZCpC
- TLSH T10493282163E840B2E2761F3CC1B2A6D1062A7D527EF1F14F6E8475D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_1372a406b72cc36807958cc2faaedc26_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_1372a406b72cc36807958cc2faaedc26_amadey_darkgate_elex_smoke-loader.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_1372a406b72cc36807958cc2faaedc26_amadey_darkgate_elex_smoke-loader
- Size 87KB
- SHA256 f22ed87bcdbf53bc3a7ac51762837e04614ecc3dcf7e7d92dc6430568d41b9b7
- MD5 1372a406b72cc36807958cc2faaedc26
- SHA1 47dd91a7ba9603c54f5846db18a04a3662217dd1
- SHA512 f6940c10ce26dfb655776003de24c263fdcd4be490be7cf921e112ef779343900bae6832bfc75bd207a6bbb6afdd4cc314a44894673415d83b4d10c11e5e5aa2
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTi9:wCCSUacxmurlg0v4iRZCpC
- TLSH T10493282163E840B2E2761F3CC1B2A6D1062A7D527EF1F14F6E8475D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.