General
- Target 2026-06-02_4c2028acc2248bb510e5c0c1cd935767_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260602-dkzjpscv4y
- SHA256 e39eab6ef93178d789826975f440beb928120f2f140cc38689f35041048c4d60
- MD5 4c2028acc2248bb510e5c0c1cd935767
- SHA1 2385d894a70760d5d61ebf759f1a270d18781898
- SHA512 743b04880acc29e23f6dd8200aeaca7c1c54780a4b23315827072c994835b1e924cc6ab2500c5ab23acf502ec1716e9879872eeff98678354e7ebf72aa399796
- SSDEEP 49152:y9POsuKsvUdSgouvAeFfenxyQZXS7uQ0NIq:jHlvUS1uxaxdS7u9
- TLSH T156953A1627F95129F1F32B70DABA42685AB77CA6AD3BC50F6280115F0CB4A90DE71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_4c2028acc2248bb510e5c0c1cd935767_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_4c2028acc2248bb510e5c0c1cd935767_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_4c2028acc2248bb510e5c0c1cd935767_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 e39eab6ef93178d789826975f440beb928120f2f140cc38689f35041048c4d60
- MD5 4c2028acc2248bb510e5c0c1cd935767
- SHA1 2385d894a70760d5d61ebf759f1a270d18781898
- SHA512 743b04880acc29e23f6dd8200aeaca7c1c54780a4b23315827072c994835b1e924cc6ab2500c5ab23acf502ec1716e9879872eeff98678354e7ebf72aa399796
- SSDEEP 49152:y9POsuKsvUdSgouvAeFfenxyQZXS7uQ0NIq:jHlvUS1uxaxdS7u9
- TLSH T156953A1627F95129F1F32B70DABA42685AB77CA6AD3BC50F6280115F0CB4A90DE71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1