General
- Target 2026-08-04_155e9bbb58e3dca86653618bf23c7341_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260804-t48jqaam5v
- SHA256 55e4b16a82d0f1e4cfc0f30d9d9b41fd78afd7411a4b3df1eedca34eeb36aef2
- MD5 155e9bbb58e3dca86653618bf23c7341
- SHA1 89c72ea1084c0bde13b20fee2131ba30107ca38c
- SHA512 fc1a368cd41404d14b1953737b30f04387f4208af26dc6f9204a49fabbfdb46ab9850e7b48241ee4a84296ef0e74418e510bb3c8c941bbc417af8526edceaeb9
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTip:wCCSUacxmurlg0v4iRZCp+
- TLSH T17793282163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8435D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_155e9bbb58e3dca86653618bf23c7341_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_155e9bbb58e3dca86653618bf23c7341_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_155e9bbb58e3dca86653618bf23c7341_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 55e4b16a82d0f1e4cfc0f30d9d9b41fd78afd7411a4b3df1eedca34eeb36aef2
- MD5 155e9bbb58e3dca86653618bf23c7341
- SHA1 89c72ea1084c0bde13b20fee2131ba30107ca38c
- SHA512 fc1a368cd41404d14b1953737b30f04387f4208af26dc6f9204a49fabbfdb46ab9850e7b48241ee4a84296ef0e74418e510bb3c8c941bbc417af8526edceaeb9
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTip:wCCSUacxmurlg0v4iRZCp+
- TLSH T17793282163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8435D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.