General
- Target 2026-08-02_833dfb03594fd08f92810f5a63245b55_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260802-rfq9esvaqc
- SHA256 840341a6fa50872cd12e7912abad9894d0ab6a392ac6f4b59d7597ba612f2469
- MD5 833dfb03594fd08f92810f5a63245b55
- SHA1 a691404732ed046a7b906d5fec5248fc6f3edcbc
- SHA512 f5a76cedeadf9564a86ad2e82931e166b6ed4b5c08e0fdffdd0db9cbe022aa3f1acd2940960d39126b6b85eef874a2be7505e1c71e3dec8245e4608e855701a4
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTij:wCCSUacxmurlg0v4iRZCp4
- TLSH T15293182163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8471D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_833dfb03594fd08f92810f5a63245b55_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_833dfb03594fd08f92810f5a63245b55_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_833dfb03594fd08f92810f5a63245b55_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 840341a6fa50872cd12e7912abad9894d0ab6a392ac6f4b59d7597ba612f2469
- MD5 833dfb03594fd08f92810f5a63245b55
- SHA1 a691404732ed046a7b906d5fec5248fc6f3edcbc
- SHA512 f5a76cedeadf9564a86ad2e82931e166b6ed4b5c08e0fdffdd0db9cbe022aa3f1acd2940960d39126b6b85eef874a2be7505e1c71e3dec8245e4608e855701a4
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTij:wCCSUacxmurlg0v4iRZCp4
- TLSH T15293182163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8471D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.