General
- Target 2026-08-09_d6e48d7648cdc5113481880fe5f8a998_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260809-tcf1dshm9y
- SHA256 bfe3692d058a8c2e4e014b2df60a5b51d2b58fd213dd39a17589d03c588d80ae
- MD5 d6e48d7648cdc5113481880fe5f8a998
- SHA1 e4e338099edfe1ea78771e4a8dfba8234f3d9d7e
- SHA512 f843b87733077bb3d166bde04c34b262ce3b2163cb29a4491b1a1fe502bef9dbae0dcf2804f2235ca70f13a3c795ab1db6aec11defe51ca1cf6bbdf957319b96
- SSDEEP 49152:Lc9MuLmeeASgouvAeFfenxyQZXS7uQ0NIq:Q9LmeZS1uxaxdS7u9
- TLSH T187955A1A63F95129F9F37B31DEBA53A45A77BC719E3AD20E1284021F1CB0A509A71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d6e48d7648cdc5113481880fe5f8a998_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d6e48d7648cdc5113481880fe5f8a998_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d6e48d7648cdc5113481880fe5f8a998_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 bfe3692d058a8c2e4e014b2df60a5b51d2b58fd213dd39a17589d03c588d80ae
- MD5 d6e48d7648cdc5113481880fe5f8a998
- SHA1 e4e338099edfe1ea78771e4a8dfba8234f3d9d7e
- SHA512 f843b87733077bb3d166bde04c34b262ce3b2163cb29a4491b1a1fe502bef9dbae0dcf2804f2235ca70f13a3c795ab1db6aec11defe51ca1cf6bbdf957319b96
- SSDEEP 49152:Lc9MuLmeeASgouvAeFfenxyQZXS7uQ0NIq:Q9LmeZS1uxaxdS7u9
- TLSH T187955A1A63F95129F9F37B31DEBA53A45A77BC719E3AD20E1284021F1CB0A509A71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1