General
- Target 2026-07-20_eadfad37d0957774801a24b29c541087_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 933KB
- Sample260720-rc4qcact4p
- SHA256 db09d49a30baba14ed9ae401bde1d8b3dfc8df86271c1cc37052d1fb29fd64cc
- MD5 eadfad37d0957774801a24b29c541087
- SHA1 88b6990e5d8c9d69329ef75cf20adb4be2e4d6cc
- SHA512 a72d3bb34577f296a03c0893c9b6a27f99716de5d72c9197186f29f049cc1e262f79a5eed0b7478bd34708d95fa8e48978338842caef2ea5c4a66a6c7758cc2a
- SSDEEP 12288:k7IUmGEtx0l874jrIWXg1MzBFnI8UChNXWAoz8Hi:7lGUU4UBdI89hWATi
- TLSH T185151A0277F98179F1F37B71AEB992645A777CB1AD39C10E26C1225E09B0A50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_eadfad37d0957774801a24b29c541087_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_eadfad37d0957774801a24b29c541087_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_eadfad37d0957774801a24b29c541087_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 933KB
- SHA256 db09d49a30baba14ed9ae401bde1d8b3dfc8df86271c1cc37052d1fb29fd64cc
- MD5 eadfad37d0957774801a24b29c541087
- SHA1 88b6990e5d8c9d69329ef75cf20adb4be2e4d6cc
- SHA512 a72d3bb34577f296a03c0893c9b6a27f99716de5d72c9197186f29f049cc1e262f79a5eed0b7478bd34708d95fa8e48978338842caef2ea5c4a66a6c7758cc2a
- SSDEEP 12288:k7IUmGEtx0l874jrIWXg1MzBFnI8UChNXWAoz8Hi:7lGUU4UBdI89hWATi
- TLSH T185151A0277F98179F1F37B71AEB992645A777CB1AD39C10E26C1225E09B0A50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory