General
- Target 2026-05-19_f70d22ef5e0ae51108e6f7c66e523fb0_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260519-bbc81aay4n
- SHA256 ef2e1cd6620d0dcb3c4b82b88c1087ddf84a5c5592d86728014d28db5f6b02e0
- MD5 f70d22ef5e0ae51108e6f7c66e523fb0
- SHA1 0663bf42a9a80702f2d2820468eff44cc1057e25
- SHA512 a388189bfd96b376fd986b43d7ee802a009aed0be7777abb4b27fa4a11fdeb0c3a73f95753d72eb888e056cc8eb0e057205e20b740a3dc97b783b6e53d9b8617
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTid:wCCSUacxmurlg0v4iRZCpy
- TLSH T11F93172163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8435D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-19_f70d22ef5e0ae51108e6f7c66e523fb0_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-19_f70d22ef5e0ae51108e6f7c66e523fb0_amadey_darkgate_elex_smoke-loader.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-19_f70d22ef5e0ae51108e6f7c66e523fb0_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 ef2e1cd6620d0dcb3c4b82b88c1087ddf84a5c5592d86728014d28db5f6b02e0
- MD5 f70d22ef5e0ae51108e6f7c66e523fb0
- SHA1 0663bf42a9a80702f2d2820468eff44cc1057e25
- SHA512 a388189bfd96b376fd986b43d7ee802a009aed0be7777abb4b27fa4a11fdeb0c3a73f95753d72eb888e056cc8eb0e057205e20b740a3dc97b783b6e53d9b8617
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTid:wCCSUacxmurlg0v4iRZCpy
- TLSH T11F93172163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8435D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.