General
- Target 2026-08-09_2fcfde8f8c750f33f4ef8616ce526cd8_amadey_darkgate_elex_smoke-loader
- Size 85KB
- Sample260809-nav4mswgrc
- SHA256 a593e91087f82171c78e512b5b09a3b470ff750eb7b2c737e47ea0ec5d72cf83
- MD5 2fcfde8f8c750f33f4ef8616ce526cd8
- SHA1 f5fd8ac12d6d3bf183734cbb47cad45804586df0
- SHA512 3ec61cb381490d2dc2a6d728944501f08af04dc93954bef2cf51b030e63d766b67f4d0386caa45e99f0a4344e46ede63c679a00ddbd658efdb4d03444437431c
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTiO:8gWjlEsvkGPBCp5
- TLSH T1F383496272984072E5611F3CC0B2A6C21A6A7D127EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_2fcfde8f8c750f33f4ef8616ce526cd8_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_2fcfde8f8c750f33f4ef8616ce526cd8_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_2fcfde8f8c750f33f4ef8616ce526cd8_amadey_darkgate_elex_smoke-loader
- Size 85KB
- SHA256 a593e91087f82171c78e512b5b09a3b470ff750eb7b2c737e47ea0ec5d72cf83
- MD5 2fcfde8f8c750f33f4ef8616ce526cd8
- SHA1 f5fd8ac12d6d3bf183734cbb47cad45804586df0
- SHA512 3ec61cb381490d2dc2a6d728944501f08af04dc93954bef2cf51b030e63d766b67f4d0386caa45e99f0a4344e46ede63c679a00ddbd658efdb4d03444437431c
- SSDEEP 1536:fTw3gWhUelqxsvLjCXk0GPW5SMwXRTWxkwTl8YTiO:8gWjlEsvkGPBCp5
- TLSH T1F383496272984072E5611F3CC0B2A6C21A6A7D127EF0F44F6E8875E95F732C06AB9753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.