General
- Target 2026-05-27_957b3a5578de3ea69fece4b464ffba2d_amadey_darkgate_elex_smoke-loader
- Size 89KB
- Sample260527-eajwyaex9n
- SHA256 2528a8da8618b10b1a7daf3abb39b56e0d4d213ea063ae37c213aaf7ed341466
- MD5 957b3a5578de3ea69fece4b464ffba2d
- SHA1 4cdbdc92c6352b4aa883a2bc3e8ddb52f1a9729b
- SHA512 4c722b48f57367f05b1d66374ec90ac205be8969e16726a4ceeafd08decc0eee3a8995916d297828f7e64a7aa5872cd1ab5781297169135076eec1db5bf0b2ed
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiIT:wCCSUacxmurlg0v4iRZCpF
- TLSH T19193072163E840B2E2765F3CC1B2A2D1062A7D527EF1F14F6D8475D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-27_957b3a5578de3ea69fece4b464ffba2d_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_957b3a5578de3ea69fece4b464ffba2d_amadey_darkgate_elex_smoke-loader.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_957b3a5578de3ea69fece4b464ffba2d_amadey_darkgate_elex_smoke-loader
- Size 89KB
- SHA256 2528a8da8618b10b1a7daf3abb39b56e0d4d213ea063ae37c213aaf7ed341466
- MD5 957b3a5578de3ea69fece4b464ffba2d
- SHA1 4cdbdc92c6352b4aa883a2bc3e8ddb52f1a9729b
- SHA512 4c722b48f57367f05b1d66374ec90ac205be8969e16726a4ceeafd08decc0eee3a8995916d297828f7e64a7aa5872cd1ab5781297169135076eec1db5bf0b2ed
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiIT:wCCSUacxmurlg0v4iRZCpF
- TLSH T19193072163E840B2E2765F3CC1B2A2D1062A7D527EF1F14F6D8475D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.