General
- Target 2026-04-25_efd208c0f36769676641a8801f239033_amadey_darkgate_elex_smoke-loader
- Size 87KB
- Sample260425-la41faay8r
- SHA256 c4d614fb32db76d81fa39437780844efa18ff3d396ab0266d6a0bdaa0856a7a5
- MD5 efd208c0f36769676641a8801f239033
- SHA1 d0931c2fb1ee47a82bd43748d5a769c5147c24be
- SHA512 b6fda3dd223448009efefecf99c917ed1645d9988f7498183e1775e1435a457e1d57239159a9d651fba669efe4061a1bb00d972fa0fa94dda7bc9a7e5ef9df52
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTi1:wCCSUacxmurlg0v4iRZCpK
- TLSH T1F793272163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_efd208c0f36769676641a8801f239033_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_efd208c0f36769676641a8801f239033_amadey_darkgate_elex_smoke-loader.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_efd208c0f36769676641a8801f239033_amadey_darkgate_elex_smoke-loader
- Size 87KB
- SHA256 c4d614fb32db76d81fa39437780844efa18ff3d396ab0266d6a0bdaa0856a7a5
- MD5 efd208c0f36769676641a8801f239033
- SHA1 d0931c2fb1ee47a82bd43748d5a769c5147c24be
- SHA512 b6fda3dd223448009efefecf99c917ed1645d9988f7498183e1775e1435a457e1d57239159a9d651fba669efe4061a1bb00d972fa0fa94dda7bc9a7e5ef9df52
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTi1:wCCSUacxmurlg0v4iRZCpK
- TLSH T1F793272163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.