General
- Target 2026-07-06_f8d057c631ba70097056c8db69869351_amadey_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader_stop
- Size 2.1MB
- Sample260706-x429gscs71
- SHA256 82d05950cad85272c606b433cc0dc52a51abc9bc82d07c8b11d05022648a3277
- MD5 f8d057c631ba70097056c8db69869351
- SHA1 061582fc3a5e62e50935dc51e5cd220f284a4a38
- SHA512 ccdeaa1cc7891dc8c9ba5702674c038b8a88fc8af7276e6d80af0f4ad22951e343416f3c90ffeeb3bcde2e31b39acf4c014105f179a3ecff65daea7f3431f31d
- SSDEEP 24576:d6BorRoNk7BZpUw/r10Le5ji0hmxNrMWw/rzl:YBorRokpVRPji0AjGN
- TLSH T1FEA52A12B5A0D13AD0B359B5896ACBFAA9347E511F2098C767C03F6D3F72682C536336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f8d057c631ba70097056c8db69869351_amadey_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f8d057c631ba70097056c8db69869351_amadey_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f8d057c631ba70097056c8db69869351_amadey_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader_stop
- Size 2.1MB
- SHA256 82d05950cad85272c606b433cc0dc52a51abc9bc82d07c8b11d05022648a3277
- MD5 f8d057c631ba70097056c8db69869351
- SHA1 061582fc3a5e62e50935dc51e5cd220f284a4a38
- SHA512 ccdeaa1cc7891dc8c9ba5702674c038b8a88fc8af7276e6d80af0f4ad22951e343416f3c90ffeeb3bcde2e31b39acf4c014105f179a3ecff65daea7f3431f31d
- SSDEEP 24576:d6BorRoNk7BZpUw/r10Le5ji0hmxNrMWw/rzl:YBorRokpVRPji0AjGN
- TLSH T1FEA52A12B5A0D13AD0B359B5896ACBFAA9347E511F2098C767C03F6D3F72682C536336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.