General
- Target 2026-07-30_980acf6587d28643f9982a1bea9cfe09_amadey_darkgate_elex_redline-stealer_smoke-loader_stealc
- Size 29.2MB
- Sample260730-3g4fxssvbs
- SHA256 e5236b21d2c54b87d3771e3d78d1eafa6ddce00dc60ae2166b41ece358b398a0
- MD5 980acf6587d28643f9982a1bea9cfe09
- SHA1 b44e538aae44ebb1bbe24f2164a749257cf827fb
- SHA512 c2dab041f77c6db0c10cdb8066294b6cc7c40ecbbdfa4030614e19c31fb2652eedbd375be04b1d99e2306cce3234c612304bac8427a9543539680ab14d2a853c
- SSDEEP 786432:Iobf03wKKwi9r6/YDBmawUoq+AOwQqoQmszT0DT9cH9Niy:IobMgKhi9G/YDBmawUoNAOwQnZsU/qHd
- TLSH T12E6733363AB2C071D772363442AE9779E2BDB8702E3482972BD1593D2E701D2953C76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_980acf6587d28643f9982a1bea9cfe09_amadey_darkgate_elex_redline-stealer_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_980acf6587d28643f9982a1bea9cfe09_amadey_darkgate_elex_redline-stealer_smoke-loader_stealc
- Size 29.2MB
- SHA256 e5236b21d2c54b87d3771e3d78d1eafa6ddce00dc60ae2166b41ece358b398a0
- MD5 980acf6587d28643f9982a1bea9cfe09
- SHA1 b44e538aae44ebb1bbe24f2164a749257cf827fb
- SHA512 c2dab041f77c6db0c10cdb8066294b6cc7c40ecbbdfa4030614e19c31fb2652eedbd375be04b1d99e2306cce3234c612304bac8427a9543539680ab14d2a853c
- SSDEEP 786432:Iobf03wKKwi9r6/YDBmawUoq+AOwQqoQmszT0DT9cH9Niy:IobMgKhi9G/YDBmawUoNAOwQnZsU/qHd
- TLSH T12E6733363AB2C071D772363442AE9779E2BDB8702E3482972BD1593D2E701D2953C76B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.