General
- Target 2026-07-09_ba4998cd3e223eb1755c43eb7ba1bfe8_amadey_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 2.5MB
- Sample260709-ma2qraht6t
- SHA256 f149224408812d1f82d889d60c5fd7e662f81ef779409093f596acca9e0737be
- MD5 ba4998cd3e223eb1755c43eb7ba1bfe8
- SHA1 d19b8cb9a6f685755be95f7ee9a602455752ede8
- SHA512 6d7586d5eec68b7890deab4165f841a93e420b88fdd94a5d0d8f295b27a7c690b9c816927d6248391e8691c75efc832a890e18b895c425b1336a6fac2755d094
- SSDEEP 49152:lhKPgssSt2gRsNBk9/fw2BwfmM0f7C+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9B:lhv7St3sNi9XwgwfoG+RYNAKvkTgXuqu
- TLSH T140C54B02B3E49131E2B36A31ADBAB715677ABC702E32D74F6394364D1D71B90E921723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_ba4998cd3e223eb1755c43eb7ba1bfe8_amadey_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_ba4998cd3e223eb1755c43eb7ba1bfe8_amadey_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_ba4998cd3e223eb1755c43eb7ba1bfe8_amadey_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 2.5MB
- SHA256 f149224408812d1f82d889d60c5fd7e662f81ef779409093f596acca9e0737be
- MD5 ba4998cd3e223eb1755c43eb7ba1bfe8
- SHA1 d19b8cb9a6f685755be95f7ee9a602455752ede8
- SHA512 6d7586d5eec68b7890deab4165f841a93e420b88fdd94a5d0d8f295b27a7c690b9c816927d6248391e8691c75efc832a890e18b895c425b1336a6fac2755d094
- SSDEEP 49152:lhKPgssSt2gRsNBk9/fw2BwfmM0f7C+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9B:lhv7St3sNi9XwgwfoG+RYNAKvkTgXuqu
- TLSH T140C54B02B3E49131E2B36A31ADBAB715677ABC702E32D74F6394364D1D71B90E921723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.