General

  • Target
    2026-06-26_ffa082812a7b4c26c7dae109eb994966_amadey_darkgate_elex_hellokitty_nymaim_rhadamanthys_smoke-loader
  • Size 1.7MB
  • Sample260629-ms7pqaa14v
  • SHA256 b804ad6f5fe5c01bc19e163c508c2b443e5ad57ee17c373ed2f3902266e66b30
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-26_ffa082812a7b4c26c7dae109eb994966_amadey_darkgate_elex_hellokitty_nymaim_rhadamanthys_smoke-loader
    • Size 1.7MB
    • SHA256 b804ad6f5fe5c01bc19e163c508c2b443e5ad57ee17c373ed2f3902266e66b30
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks