General
- Target 2026-04-25_ec99a8459e754b2e6b48e12d916b5069_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260425-labnwsdv4w
- SHA256 8505306258a0a0138191d97479f1f0199b07745e958c79d2704e2d2dfb815eb0
- MD5 ec99a8459e754b2e6b48e12d916b5069
- SHA1 540e144b32ac69463a645b74a3efa1cfcc3028c3
- SHA512 f727a8a8ff73ba60d33ec60d6000d40efe06519c909d326a21fbfcfec66a6453d6ef8beda1a2cc8032b24ea6a04dfe6eff6a622951386a969222e3dcda488851
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiQ:wCCSUacxmurlg0v4iRZCpz
- TLSH T1F293272163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_ec99a8459e754b2e6b48e12d916b5069_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_ec99a8459e754b2e6b48e12d916b5069_amadey_darkgate_elex_smoke-loader.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_ec99a8459e754b2e6b48e12d916b5069_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 8505306258a0a0138191d97479f1f0199b07745e958c79d2704e2d2dfb815eb0
- MD5 ec99a8459e754b2e6b48e12d916b5069
- SHA1 540e144b32ac69463a645b74a3efa1cfcc3028c3
- SHA512 f727a8a8ff73ba60d33ec60d6000d40efe06519c909d326a21fbfcfec66a6453d6ef8beda1a2cc8032b24ea6a04dfe6eff6a622951386a969222e3dcda488851
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiQ:wCCSUacxmurlg0v4iRZCpz
- TLSH T1F293272163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.