General
- Target 2026-08-09_09105ab1a2aeaaa76d7ddb706980f2ab_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260809-sb6c8atses
- SHA256 5a16f3583c2c296b250b3e2cdcb5489d3798dd5d9970d53385954a84bd5f6832
- MD5 09105ab1a2aeaaa76d7ddb706980f2ab
- SHA1 eb3b04ca34d8aa0c35d73a00266c0e148d164afc
- SHA512 3df0c5fae08b042eb744a597ea1695ba3557aaa142f5d7e37b28b9c872c8fbee503f2d3e38b42f765b439700c595dd3c8e8038730150d9f2b78274480422a7a3
- SSDEEP 49152:lWBDTImP/1KISgouvAeFfenxyQZXS7uQ0NIq:lwZtKIS1uxaxdS7u9
- TLSH T15D954C0667F54129F9F3AB74DAB983A45A767C619D39C30F23C0125E0DB8AA09D32773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_09105ab1a2aeaaa76d7ddb706980f2ab_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_09105ab1a2aeaaa76d7ddb706980f2ab_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 5a16f3583c2c296b250b3e2cdcb5489d3798dd5d9970d53385954a84bd5f6832
- MD5 09105ab1a2aeaaa76d7ddb706980f2ab
- SHA1 eb3b04ca34d8aa0c35d73a00266c0e148d164afc
- SHA512 3df0c5fae08b042eb744a597ea1695ba3557aaa142f5d7e37b28b9c872c8fbee503f2d3e38b42f765b439700c595dd3c8e8038730150d9f2b78274480422a7a3
- SSDEEP 49152:lWBDTImP/1KISgouvAeFfenxyQZXS7uQ0NIq:lwZtKIS1uxaxdS7u9
- TLSH T15D954C0667F54129F9F3AB74DAB983A45A767C619D39C30F23C0125E0DB8AA09D32773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1