General
- Target 2026-08-08_081bc36f344ba4ba4c2a9804bba60811_amadey_darkgate_elex_smoke-loader
- Size 84KB
- Sample260808-ww5tzaeh47
- SHA256 7160b9fb27edf1647ee4a7477756ec29219c3f1f547ee2d8c5ce28361945d737
- MD5 081bc36f344ba4ba4c2a9804bba60811
- SHA1 50d847281993af48555b74503cc64464f73f4bc2
- SHA512 fc5e7d51cc8dfab4aeb9ed1c7211f26ad04b444cfccdb4ac788f6b374eb6043fcf5415efb5455ae44e0225f51de71ff2ab6e08f6949155576858f5258629becd
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTib:8gWjlEsvkGPBCpQ
- TLSH T1E083496272984072E5611F3CC0B2A6C21A6B7D117EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_081bc36f344ba4ba4c2a9804bba60811_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_081bc36f344ba4ba4c2a9804bba60811_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_081bc36f344ba4ba4c2a9804bba60811_amadey_darkgate_elex_smoke-loader
- Size 84KB
- SHA256 7160b9fb27edf1647ee4a7477756ec29219c3f1f547ee2d8c5ce28361945d737
- MD5 081bc36f344ba4ba4c2a9804bba60811
- SHA1 50d847281993af48555b74503cc64464f73f4bc2
- SHA512 fc5e7d51cc8dfab4aeb9ed1c7211f26ad04b444cfccdb4ac788f6b374eb6043fcf5415efb5455ae44e0225f51de71ff2ab6e08f6949155576858f5258629becd
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTib:8gWjlEsvkGPBCpQ
- TLSH T1E083496272984072E5611F3CC0B2A6C21A6B7D117EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.