General
- Target 2026-07-04_e826baf78faa0e35aeda21dd3e454984_darkgate_elex_floxif_smoke-loader
- Size 2.4MB
- Sample260704-cfc98sev7k
- SHA256 7017d341453a504b319d39ec1befa9b6aa0f3c7a975cfbd50fd88ab57a4c7fc3
- MD5 e826baf78faa0e35aeda21dd3e454984
- SHA1 ec9d68a4c2a781a16601ce9caaf939c66cb4f477
- SHA512 be1d960e73cdd3b7a03f12a2b0d6d80fd470f418cdd407c1a4dfcb650256b8785fb8c7263e034a4f129ea31c9981f028ec2bdc1c60ccb8a97b40a5b870090384
- SSDEEP 49152:uhdS5rbjFH1kMtTuKqPc6TZHYSpfNo0fuldzyRQhwN31Z1tivh+sF/RyDIcQEDwu:uC9FVkM9oPc6tHYSpfNoEuGehwN31Ihy
- TLSH T107B57C2136D190F6C3722331955AA378F3BABD305E36424756B13E3D6934492AF38B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_e826baf78faa0e35aeda21dd3e454984_darkgate_elex_floxif_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_e826baf78faa0e35aeda21dd3e454984_darkgate_elex_floxif_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_e826baf78faa0e35aeda21dd3e454984_darkgate_elex_floxif_smoke-loader
- Size 2.4MB
- SHA256 7017d341453a504b319d39ec1befa9b6aa0f3c7a975cfbd50fd88ab57a4c7fc3
- MD5 e826baf78faa0e35aeda21dd3e454984
- SHA1 ec9d68a4c2a781a16601ce9caaf939c66cb4f477
- SHA512 be1d960e73cdd3b7a03f12a2b0d6d80fd470f418cdd407c1a4dfcb650256b8785fb8c7263e034a4f129ea31c9981f028ec2bdc1c60ccb8a97b40a5b870090384
- SSDEEP 49152:uhdS5rbjFH1kMtTuKqPc6TZHYSpfNo0fuldzyRQhwN31Z1tivh+sF/RyDIcQEDwu:uC9FVkM9oPc6tHYSpfNoEuGehwN31Ihy
- TLSH T107B57C2136D190F6C3722331955AA378F3BABD305E36424756B13E3D6934492AF38B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.