General
- Target 2026-07-08_c2004c7adf58ea97e66a9b252c30e294_amadey_darkgate_elex_smoke-loader_stop
- Size 562KB
- Sample260708-12mmsshx7p
- SHA256 44e1425d6f32afed2d0096d787392aa26ecfac3c0ef6955d9ec30c754b17c566
- MD5 c2004c7adf58ea97e66a9b252c30e294
- SHA1 9b36380fea4cde95e59aaba9aa5aedde5b5e0972
- SHA512 00563ef040d1001e4cb9c0d7998a4b4cecc527eab7b1fd80e463e86b5f06060998a82fc1c93275717c64011f3e4fd386d18dfdef52114c7bfbd08870840ced69
- SSDEEP 12288:OpnIlsAkjIf/WbGH/+8zoXEyO4pV1JTcgoLjAC5gS:OpnHAL7+8zuEgdIgoLjApS
- TLSH T131C4AFB2BA50C172C10255704D26EB6894B9DEF03F304AE7F7D83E6E6DB26D16C3650A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_c2004c7adf58ea97e66a9b252c30e294_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_c2004c7adf58ea97e66a9b252c30e294_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_c2004c7adf58ea97e66a9b252c30e294_amadey_darkgate_elex_smoke-loader_stop
- Size 562KB
- SHA256 44e1425d6f32afed2d0096d787392aa26ecfac3c0ef6955d9ec30c754b17c566
- MD5 c2004c7adf58ea97e66a9b252c30e294
- SHA1 9b36380fea4cde95e59aaba9aa5aedde5b5e0972
- SHA512 00563ef040d1001e4cb9c0d7998a4b4cecc527eab7b1fd80e463e86b5f06060998a82fc1c93275717c64011f3e4fd386d18dfdef52114c7bfbd08870840ced69
- SSDEEP 12288:OpnIlsAkjIf/WbGH/+8zoXEyO4pV1JTcgoLjAC5gS:OpnHAL7+8zuEgdIgoLjApS
- TLSH T131C4AFB2BA50C172C10255704D26EB6894B9DEF03F304AE7F7D83E6E6DB26D16C3650A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.