General
- Target 2026-08-02_063dbb3fdc4228d8e58266e58dd79a03_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260802-sa6ycsvgra
- SHA256 070481a1643bf5e4f31747e9ec5ff21d99a6fca0d7ac07de1750afd902776ce3
- MD5 063dbb3fdc4228d8e58266e58dd79a03
- SHA1 ad7b6361c089c78f4d621dbc2f320cba2abfb57b
- SHA512 0a53545b88104296563ed36ba9da8bc02bc427c207f948c5f8d990b70e7b7a258fa7f12c8160353ed7bb75cd1fca2c686ba9d7c612238f17dc7581567378ba21
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTic:wCCSUacxmurlg0v4iRZCp3
- TLSH T12993172163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_063dbb3fdc4228d8e58266e58dd79a03_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_063dbb3fdc4228d8e58266e58dd79a03_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_063dbb3fdc4228d8e58266e58dd79a03_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 070481a1643bf5e4f31747e9ec5ff21d99a6fca0d7ac07de1750afd902776ce3
- MD5 063dbb3fdc4228d8e58266e58dd79a03
- SHA1 ad7b6361c089c78f4d621dbc2f320cba2abfb57b
- SHA512 0a53545b88104296563ed36ba9da8bc02bc427c207f948c5f8d990b70e7b7a258fa7f12c8160353ed7bb75cd1fca2c686ba9d7c612238f17dc7581567378ba21
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTic:wCCSUacxmurlg0v4iRZCp3
- TLSH T12993172163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6E8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.