General
- Target 2026-07-30_d02754a0bfd6cc456871b28d571dbf32_amadey_darkgate_elex_hellokitty_smoke-loader
- Size 1012KB
- Sample260730-vghv8awvey
- SHA256 d2ff4b22ee9b7773295db880429d054ff7caec4ca612de2aa1cc42fd56b6ed46
- MD5 d02754a0bfd6cc456871b28d571dbf32
- SHA1 1436ca022231982c436faf5beb10d3a532966ecd
- SHA512 06e4c256a4c6968658ab6f02748d24c7c677a255dec9f1e58497407e6c526a11323bb34d451230dea38d0b6880795107830a4798d6268a23c9ef32efb98b2a65
- SSDEEP 12288:MwOATJPv0AhS3NHm8DTWnBtM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwae:MwTdPObnWnB6mctvE/BT76+1NCE
- TLSH T10725BF9876625473C5B40AB05BB0FFD8423A4FF33F09219672433A6B7D79B42E91B096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_d02754a0bfd6cc456871b28d571dbf32_amadey_darkgate_elex_hellokitty_smoke-loader.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d02754a0bfd6cc456871b28d571dbf32_amadey_darkgate_elex_hellokitty_smoke-loader
- Size 1012KB
- SHA256 d2ff4b22ee9b7773295db880429d054ff7caec4ca612de2aa1cc42fd56b6ed46
- MD5 d02754a0bfd6cc456871b28d571dbf32
- SHA1 1436ca022231982c436faf5beb10d3a532966ecd
- SHA512 06e4c256a4c6968658ab6f02748d24c7c677a255dec9f1e58497407e6c526a11323bb34d451230dea38d0b6880795107830a4798d6268a23c9ef32efb98b2a65
- SSDEEP 12288:MwOATJPv0AhS3NHm8DTWnBtM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwae:MwTdPObnWnB6mctvE/BT76+1NCE
- TLSH T10725BF9876625473C5B40AB05BB0FFD8423A4FF33F09219672433A6B7D79B42E91B096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1