General
- Target 2026-07-31_d363f252257dfb1df1a889436356f522_amadey_darkgate_elex_rhadamanthys_smoke-loader_wannacry
- Size 3.2MB
- Sample260731-26cttsam2t
- SHA256 cd2db9921a1f9dfc63d407c527612b51ee46c71770eae28bf3217167d2eebddc
- MD5 d363f252257dfb1df1a889436356f522
- SHA1 1f20bf9aa6dbb308387ffb3349792be2114c8042
- SHA512 cf30761526959cbb73f7598e454a7bb933cc1e8af752e7162f5b9b833185674a55e330a654ee76a152ece3b8016b1dd5a9b1f649731669284c10ae78172a4244
- SSDEEP 49152:MCIabjKoh9WF1dpCIabjKoh9WF1dek1jlYvoGxUSJpXSqJtb2I:ZIabjKoh9WFTEIabjKoh9WFTxZsRXS
- TLSH T11DF5C40DEE548E31D06544B6A492935F9A617C40CB234F87A241BEEDFFF2F905AA6331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_d363f252257dfb1df1a889436356f522_amadey_darkgate_elex_rhadamanthys_smoke-loader_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_d363f252257dfb1df1a889436356f522_amadey_darkgate_elex_rhadamanthys_smoke-loader_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_d363f252257dfb1df1a889436356f522_amadey_darkgate_elex_rhadamanthys_smoke-loader_wannacry
- Size 3.2MB
- SHA256 cd2db9921a1f9dfc63d407c527612b51ee46c71770eae28bf3217167d2eebddc
- MD5 d363f252257dfb1df1a889436356f522
- SHA1 1f20bf9aa6dbb308387ffb3349792be2114c8042
- SHA512 cf30761526959cbb73f7598e454a7bb933cc1e8af752e7162f5b9b833185674a55e330a654ee76a152ece3b8016b1dd5a9b1f649731669284c10ae78172a4244
- SSDEEP 49152:MCIabjKoh9WF1dpCIabjKoh9WF1dek1jlYvoGxUSJpXSqJtb2I:ZIabjKoh9WFTEIabjKoh9WFTxZsRXS
- TLSH T11DF5C40DEE548E31D06544B6A492935F9A617C40CB234F87A241BEEDFFF2F905AA6331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory