General
- Target 2026-08-05_a3cd29ef1efeb9251021155756248363_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260805-31vccsyeqg
- SHA256 95c2319a903d8db5a8945dc2e9f290ef12703937f571468f54be56daa7926ad0
- MD5 a3cd29ef1efeb9251021155756248363
- SHA1 52a3f786a828808b18b1def95dd584f1bbbe3d62
- SHA512 3e1d7eb90b20665cdacd8eed80c5946cf651cdaec4708a641ab97a149f6c2229c5e38c4d3b87d1bc3bd1b56512df40bc63a5595add30d65192d55a5285e061f1
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTie:wCCSUacxmurlg0v4iRZCph
- TLSH T19693282163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8471D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_a3cd29ef1efeb9251021155756248363_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_a3cd29ef1efeb9251021155756248363_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_a3cd29ef1efeb9251021155756248363_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 95c2319a903d8db5a8945dc2e9f290ef12703937f571468f54be56daa7926ad0
- MD5 a3cd29ef1efeb9251021155756248363
- SHA1 52a3f786a828808b18b1def95dd584f1bbbe3d62
- SHA512 3e1d7eb90b20665cdacd8eed80c5946cf651cdaec4708a641ab97a149f6c2229c5e38c4d3b87d1bc3bd1b56512df40bc63a5595add30d65192d55a5285e061f1
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTie:wCCSUacxmurlg0v4iRZCph
- TLSH T19693282163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8471D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.