General

  • Target
    2026-05-16_227205928c624f7300c1215366d81e7b_amadey_darkgate_elex_remcos_smoke-loader_stealc_stop_swisyn
  • Size 643KB
  • Sample260516-twvb5aay2q
  • SHA256 b9f7dc5fc16e3d02806b9f68d9ef2507fdc530f13d6e0c2ef992ad1fa79a0071
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-05-16_227205928c624f7300c1215366d81e7b_amadey_darkgate_elex_remcos_smoke-loader_stealc_stop_swisyn
    • Size 643KB
    • SHA256 b9f7dc5fc16e3d02806b9f68d9ef2507fdc530f13d6e0c2ef992ad1fa79a0071
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies visibility of hidden/system files in Explorer

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks