General
- Target 2026-07-07_5ffeadad118403d9496653dce94300cc_amadey_darkgate_elex_remcos_rhadamanthys_smoke-loader_stop
- Size 618KB
- Sample260707-jwhyzsat7l
- SHA256 9bee3eb4c6544d6e69543440bec4f1f246fad1e17067bb6e8bfd6daac7ce475f
- MD5 5ffeadad118403d9496653dce94300cc
- SHA1 c96574ebffd8fc82bc6b4bf40bf306b5602b38e7
- SHA512 76726b8a982c53cac62068a9b9531918b0230537e526f517634d14cf9459fde69303c83067cbee50b4005b9fe55108ace1a2eda980922c46925cfc8aabe59e3c
- SSDEEP 12288:yQedCPNdZcATixDKoIkQKlXcMW0s9C7w3zXBtd:NtBcATiflMMyA7w3zxtd
- TLSH T1AAD46B1077DCD873C2A2213D1AA2E37569A9BDA09F3483CB36813B7D6E315D1D978706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_5ffeadad118403d9496653dce94300cc_amadey_darkgate_elex_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_5ffeadad118403d9496653dce94300cc_amadey_darkgate_elex_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_5ffeadad118403d9496653dce94300cc_amadey_darkgate_elex_remcos_rhadamanthys_smoke-loader_stop
- Size 618KB
- SHA256 9bee3eb4c6544d6e69543440bec4f1f246fad1e17067bb6e8bfd6daac7ce475f
- MD5 5ffeadad118403d9496653dce94300cc
- SHA1 c96574ebffd8fc82bc6b4bf40bf306b5602b38e7
- SHA512 76726b8a982c53cac62068a9b9531918b0230537e526f517634d14cf9459fde69303c83067cbee50b4005b9fe55108ace1a2eda980922c46925cfc8aabe59e3c
- SSDEEP 12288:yQedCPNdZcATixDKoIkQKlXcMW0s9C7w3zXBtd:NtBcATiflMMyA7w3zxtd
- TLSH T1AAD46B1077DCD873C2A2213D1AA2E37569A9BDA09F3483CB36813B7D6E315D1D978706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.