General
- Target 2026-08-10_88764fee413786825ae91740278c8f0d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 344KB
- Sample260810-14ed7szdlb
- SHA256 d5edd08509a6f8c772baa58716741883ae44f5d73dae634de6e98d4f8a729434
- MD5 88764fee413786825ae91740278c8f0d
- SHA1 6a27cf02cfacd91d1a98a5ff3dbe02a7ec8eecf1
- SHA512 37d900eeab00d77b36fb51f9b91752e6f092e4b1bd438cd5bde9fdfc68db1a0b4faee77e4fc90ad0d7e3cab9953b2043b19a0e39be78915ca13d4fac1bfb507d
- SSDEEP 6144:MD3IUG5fdVlWOYMx24lkmYL32BJP3gb7KvUbR1y9miEIU:M7IU1OYMrlkmYz2B0Vim
- TLSH T1D0749D1176E0C836E2B32471096DD7646A69B8706E35C24F3AD1276FAF307D2CA3572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_88764fee413786825ae91740278c8f0d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_88764fee413786825ae91740278c8f0d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_88764fee413786825ae91740278c8f0d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 344KB
- SHA256 d5edd08509a6f8c772baa58716741883ae44f5d73dae634de6e98d4f8a729434
- MD5 88764fee413786825ae91740278c8f0d
- SHA1 6a27cf02cfacd91d1a98a5ff3dbe02a7ec8eecf1
- SHA512 37d900eeab00d77b36fb51f9b91752e6f092e4b1bd438cd5bde9fdfc68db1a0b4faee77e4fc90ad0d7e3cab9953b2043b19a0e39be78915ca13d4fac1bfb507d
- SSDEEP 6144:MD3IUG5fdVlWOYMx24lkmYL32BJP3gb7KvUbR1y9miEIU:M7IU1OYMrlkmYz2B0Vim
- TLSH T1D0749D1176E0C836E2B32471096DD7646A69B8706E35C24F3AD1276FAF307D2CA3572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory