General
- Target 2026-06-27_26f083f8749f0abf7de5a8a25a6b36f3_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260629-k3kltshw9v
- SHA256 aed035da20e19660dd49b14b086240d8f50f1509100fe30ce1241e3e19a729b2
- MD5 26f083f8749f0abf7de5a8a25a6b36f3
- SHA1 053899186e0e6aba37288064e25b50260b36fa13
- SHA512 4da12d7825c14cd091290ceac6713ee72bb160ad7b28b9b115f5d98f0cd83222aea2eab168c8c213e6da65884cafdc00b97d090c29bc0295a441323da753c98a
- SSDEEP 49152:Y7pHZc0VK9SgouvAeFfenxyQZXS7uQ0NIq:mHM9S1uxaxdS7u9
- TLSH T1A1953A1667F9412EF2F36B70DEB943A45A73BC669E39C10F5284125E4CB0B60A935B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_26f083f8749f0abf7de5a8a25a6b36f3_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_26f083f8749f0abf7de5a8a25a6b36f3_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 aed035da20e19660dd49b14b086240d8f50f1509100fe30ce1241e3e19a729b2
- MD5 26f083f8749f0abf7de5a8a25a6b36f3
- SHA1 053899186e0e6aba37288064e25b50260b36fa13
- SHA512 4da12d7825c14cd091290ceac6713ee72bb160ad7b28b9b115f5d98f0cd83222aea2eab168c8c213e6da65884cafdc00b97d090c29bc0295a441323da753c98a
- SSDEEP 49152:Y7pHZc0VK9SgouvAeFfenxyQZXS7uQ0NIq:mHM9S1uxaxdS7u9
- TLSH T1A1953A1667F9412EF2F36B70DEB943A45A73BC669E39C10F5284125E4CB0B60A935B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1