General
- Target 2026-08-09_d5ffdd3febb91ba3c3803ed188c3f46d_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260809-qv314aydkg
- SHA256 4acb9d6530ca7737a86eb90a0e78abc2505efaab32927270531bbcaec965e452
- MD5 d5ffdd3febb91ba3c3803ed188c3f46d
- SHA1 8984ce8df9d9b43208522c4e11227ab6f6ada781
- SHA512 ba394c2a24fa598dc19e5803934891568e05cec731ef2777d0e7c769953f4f15e004e5e4ac97b3574ac6395f2d949d06d65f7c0111dacefb2f2b82cb289a05be
- SSDEEP 24576:2fwhCQvzTL0v+HXVIhJVxyGSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:lLGzXyGSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1C5953B0737EE8129F8F36B31D9F95360AA7BBD71AD39C50E52A4119E0CB0A509A71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d5ffdd3febb91ba3c3803ed188c3f46d_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d5ffdd3febb91ba3c3803ed188c3f46d_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 4acb9d6530ca7737a86eb90a0e78abc2505efaab32927270531bbcaec965e452
- MD5 d5ffdd3febb91ba3c3803ed188c3f46d
- SHA1 8984ce8df9d9b43208522c4e11227ab6f6ada781
- SHA512 ba394c2a24fa598dc19e5803934891568e05cec731ef2777d0e7c769953f4f15e004e5e4ac97b3574ac6395f2d949d06d65f7c0111dacefb2f2b82cb289a05be
- SSDEEP 24576:2fwhCQvzTL0v+HXVIhJVxyGSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:lLGzXyGSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1C5953B0737EE8129F8F36B31D9F95360AA7BBD71AD39C50E52A4119E0CB0A509A71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1