General
- Target 2026-07-12_1f543cf49284ee0d87506d63e1bc19b7_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1020KB
- Sample260712-rdnqhsbs6k
- SHA256 938aef628e659b045cfc8d7ffa8599e6ee7e35f02b5c0b9cb8cd950da9bce8a7
- MD5 1f543cf49284ee0d87506d63e1bc19b7
- SHA1 612690d5634c8ab22cd731dd787d2cead35911d6
- SHA512 e12c5f9794bc99ff42157ca04a500018f6b5012458b926fce2ca7afdeaad9d0c58c1efd9673eef756842c71acd6672c29462429af1e62d057b865cb87b14be29
- SSDEEP 12288:xuWdwPRya03IPng+qEQfuuQ5y7rCQTrl88+kE3E/:xuWdwPRC3sqEQf7Q50uQTrl88+k5
- TLSH T11925AF11BB91C07BE456027988668B757B3A7E321BB689C3FBC01F9A1E712C16E71317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_1f543cf49284ee0d87506d63e1bc19b7_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_1f543cf49284ee0d87506d63e1bc19b7_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_1f543cf49284ee0d87506d63e1bc19b7_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1020KB
- SHA256 938aef628e659b045cfc8d7ffa8599e6ee7e35f02b5c0b9cb8cd950da9bce8a7
- MD5 1f543cf49284ee0d87506d63e1bc19b7
- SHA1 612690d5634c8ab22cd731dd787d2cead35911d6
- SHA512 e12c5f9794bc99ff42157ca04a500018f6b5012458b926fce2ca7afdeaad9d0c58c1efd9673eef756842c71acd6672c29462429af1e62d057b865cb87b14be29
- SSDEEP 12288:xuWdwPRya03IPng+qEQfuuQ5y7rCQTrl88+kE3E/:xuWdwPRC3sqEQf7Q50uQTrl88+k5
- TLSH T11925AF11BB91C07BE456027988668B757B3A7E321BB689C3FBC01F9A1E712C16E71317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1