General
- Target 2026-08-06_2240169b45bbdb39919bf4b8be1a69c8_amadey_darkgate_elex_remcos_smoke-loader_stealc_stop
- Size 1.8MB
- Sample260807-bdjhssdp9t
- SHA256 ba75cfec70707fde3b87cd1b0a827445514bd057ac3ec6402825df18ef93e435
- MD5 2240169b45bbdb39919bf4b8be1a69c8
- SHA1 72c9c05f2ff150d760ae7ed7fc44c713c130d622
- SHA512 3066dbb9de81b90c4cfdb44b7fbf3aedf600f2d098e68f2dd437ca44c1ac5f41146db612d7dd37efd4848ca3fdb05e622042bdd3fea9e5aab3c6aa45d32c24cd
- SSDEEP 24576:HOQvxuWxrME2Xa9vODdagKnQ/tbw/2Mkjy6Fr7g0o:uQv8WxrVu2gKQ/lFTjN4
- TLSH T15E95F011B784E032C26221744F67E7B566BEAEA06F7553C777C42B7E2E302C05939B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_2240169b45bbdb39919bf4b8be1a69c8_amadey_darkgate_elex_remcos_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_2240169b45bbdb39919bf4b8be1a69c8_amadey_darkgate_elex_remcos_smoke-loader_stealc_stop
- Size 1.8MB
- SHA256 ba75cfec70707fde3b87cd1b0a827445514bd057ac3ec6402825df18ef93e435
- MD5 2240169b45bbdb39919bf4b8be1a69c8
- SHA1 72c9c05f2ff150d760ae7ed7fc44c713c130d622
- SHA512 3066dbb9de81b90c4cfdb44b7fbf3aedf600f2d098e68f2dd437ca44c1ac5f41146db612d7dd37efd4848ca3fdb05e622042bdd3fea9e5aab3c6aa45d32c24cd
- SSDEEP 24576:HOQvxuWxrME2Xa9vODdagKnQ/tbw/2Mkjy6Fr7g0o:uQv8WxrVu2gKQ/lFTjN4
- TLSH T15E95F011B784E032C26221744F67E7B566BEAEA06F7553C777C42B7E2E302C05939B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1