General
- Target 2026-08-09_34e2ae2a46c6ccca915de73a82097f0e_darkgate_rhadamanthys_smoke-loader_stop
- Size 8.9MB
- Sample260809-xcc6aabr71
- SHA256 ebc1916f925c800ad6d2afa5a00393d7ccfba318445376433d45b3a98deb079a
- MD5 34e2ae2a46c6ccca915de73a82097f0e
- SHA1 7c785ed9b1583f50e28ca08b5d5c9770065d76d2
- SHA512 b76176ca5a145e357b6017b82a22213669dd10e5d2df31759340a21f271ff0708c421c065961ab880ea590336aa203438fe61ac0388eb07134d99c0887127dae
- SSDEEP 196608:Y8xSKVI3YqN99IAP3VZthxaKkBw99BCKgdA3SMhhZZiyc4ooKoC51ANDVa4yBoGI:YQXIoqT9H3GoAOO
- TLSH T1A4969E2A77E400F1D1736331891696AAE5F67D205B3086DF41907E792F339A28D3EB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_34e2ae2a46c6ccca915de73a82097f0e_darkgate_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_34e2ae2a46c6ccca915de73a82097f0e_darkgate_rhadamanthys_smoke-loader_stop
- Size 8.9MB
- SHA256 ebc1916f925c800ad6d2afa5a00393d7ccfba318445376433d45b3a98deb079a
- MD5 34e2ae2a46c6ccca915de73a82097f0e
- SHA1 7c785ed9b1583f50e28ca08b5d5c9770065d76d2
- SHA512 b76176ca5a145e357b6017b82a22213669dd10e5d2df31759340a21f271ff0708c421c065961ab880ea590336aa203438fe61ac0388eb07134d99c0887127dae
- SSDEEP 196608:Y8xSKVI3YqN99IAP3VZthxaKkBw99BCKgdA3SMhhZZiyc4ooKoC51ANDVa4yBoGI:YQXIoqT9H3GoAOO
- TLSH T1A4969E2A77E400F1D1736331891696AAE5F67D205B3086DF41907E792F339A28D3EB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1