General
- Target 2026-07-08_649c240872f80d3965e63bec12650f4f_amadey_darkgate_elex_gcleaner_smoke-loader_stop
- Size 31.1MB
- Sample260709-a6tc2abs2p
- SHA256 4c7804e9636e636b8efd5bc862ca3dc5c24bd3bdfd130a128f6c8a6c26949674
- MD5 649c240872f80d3965e63bec12650f4f
- SHA1 319be738b6afe81a26959563e1629a3cdd075fd7
- SHA512 665ef1eaf4ae2801a9af7e8287310e4747dc75761f7a1c58058b2a472355654a70276f7dc82ed9881a8ea6a88016e23a3c9cf7bd419e62f2f57a744856f45dc3
- SSDEEP 786432:T8lXUAlAcMNqdzk+KLnZTAQZ03NuwiUG2bt5G2NW4ULo+loU:T8blAIyBZTTouw/zbjtKo+2U
- TLSH T19167336360030132C6E51636D817BFED72B3A665071B2CFA1BAD6CC42B79981BB159F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_649c240872f80d3965e63bec12650f4f_amadey_darkgate_elex_gcleaner_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_649c240872f80d3965e63bec12650f4f_amadey_darkgate_elex_gcleaner_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_649c240872f80d3965e63bec12650f4f_amadey_darkgate_elex_gcleaner_smoke-loader_stop
- Size 31.1MB
- SHA256 4c7804e9636e636b8efd5bc862ca3dc5c24bd3bdfd130a128f6c8a6c26949674
- MD5 649c240872f80d3965e63bec12650f4f
- SHA1 319be738b6afe81a26959563e1629a3cdd075fd7
- SHA512 665ef1eaf4ae2801a9af7e8287310e4747dc75761f7a1c58058b2a472355654a70276f7dc82ed9881a8ea6a88016e23a3c9cf7bd419e62f2f57a744856f45dc3
- SSDEEP 786432:T8lXUAlAcMNqdzk+KLnZTAQZ03NuwiUG2bt5G2NW4ULo+loU:T8blAIyBZTTouw/zbjtKo+2U
- TLSH T19167336360030132C6E51636D817BFED72B3A665071B2CFA1BAD6CC42B79981BB159F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.