General
- Target 2026-08-02_8d9c388ad1ae9c6cd75be9a9027e2fbb_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260802-j8pmasfl4s
- SHA256 f817c43318bab606d955b86edba433785e8430b5dae094e5f30b3532ccc6b59d
- MD5 8d9c388ad1ae9c6cd75be9a9027e2fbb
- SHA1 a39f9f02f80f559ca54f0dc03171330eaf0f9190
- SHA512 4a4a1bb8bc19a45b3f2e6ffa62186ba84ae4a22561cbd02b1ba2e88814cf978590c89afb33de90c549183fa244d4242e87b32617822d95372171f5b181709b29
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiP:wCCSUacxmurlg0v4iRZCpc
- TLSH T1C793172163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8d9c388ad1ae9c6cd75be9a9027e2fbb_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8d9c388ad1ae9c6cd75be9a9027e2fbb_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8d9c388ad1ae9c6cd75be9a9027e2fbb_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 f817c43318bab606d955b86edba433785e8430b5dae094e5f30b3532ccc6b59d
- MD5 8d9c388ad1ae9c6cd75be9a9027e2fbb
- SHA1 a39f9f02f80f559ca54f0dc03171330eaf0f9190
- SHA512 4a4a1bb8bc19a45b3f2e6ffa62186ba84ae4a22561cbd02b1ba2e88814cf978590c89afb33de90c549183fa244d4242e87b32617822d95372171f5b181709b29
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiP:wCCSUacxmurlg0v4iRZCpc
- TLSH T1C793172163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.