General
- Target 2026-08-09_87c249e15dfec4c0d8c61d6f4caeb537_amadey_darkgate_elex_smoke-loader
- Size 84KB
- Sample260809-k3ka3avaqc
- SHA256 43a8f90b2d151e07771709c0a602963ec49bf8742ccfcd3d0e0e54992ae3e0e2
- MD5 87c249e15dfec4c0d8c61d6f4caeb537
- SHA1 1163a77dfeb7d38ecf1ea4814d01621adbcff738
- SHA512 6232bf20f93db3a441e97f05f5021e83e14bddbbe1f910b7989d30849f9258439aa513f5680d861783bbedd65a105219b061658ec48df56e3b2ff5b7fb19419e
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTiU:8gWjlEsvkGPBCpP
- TLSH T1C883496272984072E5611F3CC0B2A6C21A6B7D127EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_87c249e15dfec4c0d8c61d6f4caeb537_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_87c249e15dfec4c0d8c61d6f4caeb537_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_87c249e15dfec4c0d8c61d6f4caeb537_amadey_darkgate_elex_smoke-loader
- Size 84KB
- SHA256 43a8f90b2d151e07771709c0a602963ec49bf8742ccfcd3d0e0e54992ae3e0e2
- MD5 87c249e15dfec4c0d8c61d6f4caeb537
- SHA1 1163a77dfeb7d38ecf1ea4814d01621adbcff738
- SHA512 6232bf20f93db3a441e97f05f5021e83e14bddbbe1f910b7989d30849f9258439aa513f5680d861783bbedd65a105219b061658ec48df56e3b2ff5b7fb19419e
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTiU:8gWjlEsvkGPBCpP
- TLSH T1C883496272984072E5611F3CC0B2A6C21A6B7D127EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.