General
- Target 2026-08-09_0bc2793ce461d5a451edb68017b985c2_amadey_darkgate_elex_smoke-loader
- Size 85KB
- Sample260809-mfpy5sy1f1
- SHA256 1c6ed667e9cf3beb66570787f94110b85de3cbab2e25fbc9873f22da526e690e
- MD5 0bc2793ce461d5a451edb68017b985c2
- SHA1 f309f60b3239f0c515caa7dd9a7b9914eca280dc
- SHA512 cd0576a85e06d8926c88c828c0e0dbf444193779206da9d3836cb2bb987f82ccad0171b644618ac70c40061f4b3519f684bda5621966d295bef92d2a973584cd
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTij:8gWjlEsvkGPBCp4
- TLSH T1C183496272D84072D5611F3CC0B2A6C21A6A7D127EF0F44F6E8875E95F732C06AB9B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_0bc2793ce461d5a451edb68017b985c2_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0bc2793ce461d5a451edb68017b985c2_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_0bc2793ce461d5a451edb68017b985c2_amadey_darkgate_elex_smoke-loader
- Size 85KB
- SHA256 1c6ed667e9cf3beb66570787f94110b85de3cbab2e25fbc9873f22da526e690e
- MD5 0bc2793ce461d5a451edb68017b985c2
- SHA1 f309f60b3239f0c515caa7dd9a7b9914eca280dc
- SHA512 cd0576a85e06d8926c88c828c0e0dbf444193779206da9d3836cb2bb987f82ccad0171b644618ac70c40061f4b3519f684bda5621966d295bef92d2a973584cd
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTij:8gWjlEsvkGPBCp4
- TLSH T1C183496272D84072D5611F3CC0B2A6C21A6A7D127EF0F44F6E8875E95F732C06AB9B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.