General
- Target 2026-06-29_16936ea4f594776c7fa1f0e917bc3495_amadey_bkransomware_darkgate_elex_maze_smoke-loader
- Size 905KB
- Sample260630-ptr2rsft3v
- SHA256 0821a793eb46aab3ba16aedfd3b8ada413712c57e099dced5776a185948ff65a
- MD5 16936ea4f594776c7fa1f0e917bc3495
- SHA1 ef63d6ccc0559bd9a0f364acd195429392780439
- SHA512 e258499a584fe96fca84975ae2c73cf53d412db0a17a941f449d573737d98f7226b89315d9da93098326c3619c14b3c283bd1bb0ecfc3678e08d28d6441f03b9
- SSDEEP 12288:3PJi0zjNuRn0WSba1isTQAZwG6uO3e2hOlkfSjvvzAZuNjvUZ4B:I0nUR0ZmSoIakkmuNjvUZ
- TLSH T150157C127AE1C03FD1730232492DB275A1BBBD620D75520773E46F2E2BB4592AE74B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_16936ea4f594776c7fa1f0e917bc3495_amadey_bkransomware_darkgate_elex_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_16936ea4f594776c7fa1f0e917bc3495_amadey_bkransomware_darkgate_elex_maze_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_16936ea4f594776c7fa1f0e917bc3495_amadey_bkransomware_darkgate_elex_maze_smoke-loader
- Size 905KB
- SHA256 0821a793eb46aab3ba16aedfd3b8ada413712c57e099dced5776a185948ff65a
- MD5 16936ea4f594776c7fa1f0e917bc3495
- SHA1 ef63d6ccc0559bd9a0f364acd195429392780439
- SHA512 e258499a584fe96fca84975ae2c73cf53d412db0a17a941f449d573737d98f7226b89315d9da93098326c3619c14b3c283bd1bb0ecfc3678e08d28d6441f03b9
- SSDEEP 12288:3PJi0zjNuRn0WSba1isTQAZwG6uO3e2hOlkfSjvvzAZuNjvUZ4B:I0nUR0ZmSoIakkmuNjvUZ
- TLSH T150157C127AE1C03FD1730232492DB275A1BBBD620D75520773E46F2E2BB4592AE74B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.