General
- Target 2026-08-03_3b5239eac21310d7559fc2c063a0a4a6_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 977KB
- Sample260804-djnqta1brc
- SHA256 e6d44b3887b64682a1b42aebe0c0675ed53b120a2cc072eed07b072e1bb294f7
- MD5 3b5239eac21310d7559fc2c063a0a4a6
- SHA1 c30aa49ea88ee399f056938b77ae7af03d02fe09
- SHA512 0000270ffd99aa35edaa767289883c6a67e20224eab299f0ee09fb94f11e2ce27e243857af1551db0562d3393764fc72359414c9d3a1adca4cfeb9eeae70aad0
- SSDEEP 12288:xaoUnx1BGEtx0l874jrIWXg1MzBFnI8UChNXWH:xApGUU4UBdI89hWH
- TLSH T15A25090277F98179F1F37B71AEB992645A77BCA0AD35C10E27D1225E0970A90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_3b5239eac21310d7559fc2c063a0a4a6_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_3b5239eac21310d7559fc2c063a0a4a6_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_3b5239eac21310d7559fc2c063a0a4a6_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 977KB
- SHA256 e6d44b3887b64682a1b42aebe0c0675ed53b120a2cc072eed07b072e1bb294f7
- MD5 3b5239eac21310d7559fc2c063a0a4a6
- SHA1 c30aa49ea88ee399f056938b77ae7af03d02fe09
- SHA512 0000270ffd99aa35edaa767289883c6a67e20224eab299f0ee09fb94f11e2ce27e243857af1551db0562d3393764fc72359414c9d3a1adca4cfeb9eeae70aad0
- SSDEEP 12288:xaoUnx1BGEtx0l874jrIWXg1MzBFnI8UChNXWH:xApGUU4UBdI89hWH
- TLSH T15A25090277F98179F1F37B71AEB992645A77BCA0AD35C10E27D1225E0970A90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.