General
- Target 2026-06-28_ccf512e5719654d6353f9d5b9bef56ca_darkgate_elex_floxif_smoke-loader
- Size 2.4MB
- Sample260628-xpcqaabz9z
- SHA256 72f51da3f08f49726d8e5ddde73657210d2891991b88009ee026221566a9f039
- MD5 ccf512e5719654d6353f9d5b9bef56ca
- SHA1 334e0a1e5ab343c49d55ae14bb791af8e7606eba
- SHA512 3479fc059e43b6807cc28bdad083c826dfc5a0bc94c98a2e58f0d7be09752e102ce2f249c62bdf966c145ab94c64f7614244846d3ca5155016159c5bded5682c
- SSDEEP 49152:qhd95rbjFH1kMtTuKqPc6TZHYSpfNo0fulAz9RQhwN31Z1tivh+sF/RyDIcQEDS:qN9FVkM9oPc6tHYSpfNoEuYehwN31IhX
- TLSH T123B57C2136D090F6C3722731955AA378F3AEBE305E36424756B13E3D6974492AF3872B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_ccf512e5719654d6353f9d5b9bef56ca_darkgate_elex_floxif_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_ccf512e5719654d6353f9d5b9bef56ca_darkgate_elex_floxif_smoke-loader.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_ccf512e5719654d6353f9d5b9bef56ca_darkgate_elex_floxif_smoke-loader
- Size 2.4MB
- SHA256 72f51da3f08f49726d8e5ddde73657210d2891991b88009ee026221566a9f039
- MD5 ccf512e5719654d6353f9d5b9bef56ca
- SHA1 334e0a1e5ab343c49d55ae14bb791af8e7606eba
- SHA512 3479fc059e43b6807cc28bdad083c826dfc5a0bc94c98a2e58f0d7be09752e102ce2f249c62bdf966c145ab94c64f7614244846d3ca5155016159c5bded5682c
- SSDEEP 49152:qhd95rbjFH1kMtTuKqPc6TZHYSpfNo0fulAz9RQhwN31Z1tivh+sF/RyDIcQEDS:qN9FVkM9oPc6tHYSpfNoEuYehwN31IhX
- TLSH T123B57C2136D090F6C3722731955AA378F3AEBE305E36424756B13E3D6974492AF3872B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.