General
- Target 2026-07-07_0068af3448da6b2afb0726dd26aa9281_amadey_darkgate_elex_remcos_smoke-loader_stop
- Size 1.3MB
- Sample260707-km4d1abs7n
- SHA256 b1004ad84de821545327ddb5e7fa675ece075095c7af977eb10d4d43931df36c
- MD5 0068af3448da6b2afb0726dd26aa9281
- SHA1 51dd125d01ff484ce85c96f8582908e6956648c6
- SHA512 fdbc558a2eb296ad2637b228f6a40a134a95c29c922d4f004a30fee22474fcf3427cb44866d02709390112a09fa2f09757de5fba1ab14e253e7c2b3bf7a64b52
- SSDEEP 24576:2YoHa9pNKITyDcEjt3xJwS80e/uwxc/+duUx6e6te8ukwxqjtxn9IN:2INKrDV8Srentkl5UAu
- TLSH T1E8559D10B4A4C03DD88125BEA775929A3FBD181A8FB6D1C77F9F223B1D252CEC076652
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_0068af3448da6b2afb0726dd26aa9281_amadey_darkgate_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_0068af3448da6b2afb0726dd26aa9281_amadey_darkgate_elex_remcos_smoke-loader_stop
- Size 1.3MB
- SHA256 b1004ad84de821545327ddb5e7fa675ece075095c7af977eb10d4d43931df36c
- MD5 0068af3448da6b2afb0726dd26aa9281
- SHA1 51dd125d01ff484ce85c96f8582908e6956648c6
- SHA512 fdbc558a2eb296ad2637b228f6a40a134a95c29c922d4f004a30fee22474fcf3427cb44866d02709390112a09fa2f09757de5fba1ab14e253e7c2b3bf7a64b52
- SSDEEP 24576:2YoHa9pNKITyDcEjt3xJwS80e/uwxc/+duUx6e6te8ukwxqjtxn9IN:2INKrDV8Srentkl5UAu
- TLSH T1E8559D10B4A4C03DD88125BEA775929A3FBD181A8FB6D1C77F9F223B1D252CEC076652
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.