General
- Target 2026-07-09_45797dc73c04b72ebe03df6197039a4d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- Sample260709-fwfbbacy3q
- SHA256 aa0fe4fe63e6ef964c76dddc7fdc30614d66ba5ad8604496d7afd3ac0a641327
- MD5 45797dc73c04b72ebe03df6197039a4d
- SHA1 1240527964c72af35da5810220fd038fcf8baa8a
- SHA512 8339b4b6bb6b8c51a9addc531733d265e27d490f12fda61b868fa565d682d60932bc9020ceea1bb24ff20812cefc6b6c47af84ee2c15e1035e4ceb5a96bcd96e
- SSDEEP 24576:Qr0URPEJ0sg+9QqVkpSHeJFf9n1i99k32tY5cz84:QrxRP9sg+OqVks+JFln1i99ZG5v4
- TLSH T138756B0277F99169F1F37BB1EEB883645A77BC71AD39C50E6280215E09B4A40DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_45797dc73c04b72ebe03df6197039a4d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_45797dc73c04b72ebe03df6197039a4d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_45797dc73c04b72ebe03df6197039a4d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- SHA256 aa0fe4fe63e6ef964c76dddc7fdc30614d66ba5ad8604496d7afd3ac0a641327
- MD5 45797dc73c04b72ebe03df6197039a4d
- SHA1 1240527964c72af35da5810220fd038fcf8baa8a
- SHA512 8339b4b6bb6b8c51a9addc531733d265e27d490f12fda61b868fa565d682d60932bc9020ceea1bb24ff20812cefc6b6c47af84ee2c15e1035e4ceb5a96bcd96e
- SSDEEP 24576:Qr0URPEJ0sg+9QqVkpSHeJFf9n1i99k32tY5cz84:QrxRP9sg+OqVks+JFln1i99ZG5v4
- TLSH T138756B0277F99169F1F37BB1EEB883645A77BC71AD39C50E6280215E09B4A40DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1