General
- Target 2026-07-06_79c8ea9a7a70d90d29e853691b895fc4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 317KB
- Sample260706-wnmnesex9p
- SHA256 5029b33930d60a1fbb38160bc4313986b04513c4108918e20e2dbf0aa79f8b38
- MD5 79c8ea9a7a70d90d29e853691b895fc4
- SHA1 185214c94d2178454be02cc395f79dbdfee38684
- SHA512 c7d40d7c1cc72ce61878ccb9406ed8a2a6978564829f9895e278e0b7b858433693741e085497bbcaec4c397d97e4e7ebdd42e3bc32201298b85e2c778bf7da8c
- SSDEEP 6144:dnMfIq+XLROUxHXGmUReIyZyCcgHuVzOaO+tZGb:dMgZXNOUBXXRTOAz+Gb
- TLSH T1F9647B02A6718072DB6A073B4052E37646797E341355A6CBE7A43A3EDD312D3673B38E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_79c8ea9a7a70d90d29e853691b895fc4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_79c8ea9a7a70d90d29e853691b895fc4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_79c8ea9a7a70d90d29e853691b895fc4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 317KB
- SHA256 5029b33930d60a1fbb38160bc4313986b04513c4108918e20e2dbf0aa79f8b38
- MD5 79c8ea9a7a70d90d29e853691b895fc4
- SHA1 185214c94d2178454be02cc395f79dbdfee38684
- SHA512 c7d40d7c1cc72ce61878ccb9406ed8a2a6978564829f9895e278e0b7b858433693741e085497bbcaec4c397d97e4e7ebdd42e3bc32201298b85e2c778bf7da8c
- SSDEEP 6144:dnMfIq+XLROUxHXGmUReIyZyCcgHuVzOaO+tZGb:dMgZXNOUBXXRTOAz+Gb
- TLSH T1F9647B02A6718072DB6A073B4052E37646797E341355A6CBE7A43A3EDD312D3673B38E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.