General
- Target 2026-08-09_05cc1a39e21d9088cf75d877a4a86906_amadey_darkgate_elex_smoke-loader
- Size 85KB
- Sample260809-etv4bahk6w
- SHA256 f6ca6956ae921b7f26403728ad802505d93de88c007f8bc19bf16f57a04f7eaa
- MD5 05cc1a39e21d9088cf75d877a4a86906
- SHA1 f248195186c58b7ada1aeed0ffd8fbb24aa8fe9b
- SHA512 21c36c622222adc96c4f9b908c3da63b04609f47859789dc96ce053ddb31dda64dbe70e1df2606c42f7accb06ae0f6ced0a8ac478f1abb691eddd39d1657a37e
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTiS:8gWjlEsvkGPBCp9
- TLSH T1F183496272D84072D5611F3CC0B2A6C21A6A7D117EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_05cc1a39e21d9088cf75d877a4a86906_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_05cc1a39e21d9088cf75d877a4a86906_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_05cc1a39e21d9088cf75d877a4a86906_amadey_darkgate_elex_smoke-loader
- Size 85KB
- SHA256 f6ca6956ae921b7f26403728ad802505d93de88c007f8bc19bf16f57a04f7eaa
- MD5 05cc1a39e21d9088cf75d877a4a86906
- SHA1 f248195186c58b7ada1aeed0ffd8fbb24aa8fe9b
- SHA512 21c36c622222adc96c4f9b908c3da63b04609f47859789dc96ce053ddb31dda64dbe70e1df2606c42f7accb06ae0f6ced0a8ac478f1abb691eddd39d1657a37e
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTiS:8gWjlEsvkGPBCp9
- TLSH T1F183496272D84072D5611F3CC0B2A6C21A6A7D117EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.