General
- Target 2026-08-10_03089cae88a1018a7d1699ff81d6bcee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 344KB
- Sample260810-21975sbm8y
- SHA256 617c6dc74f86763021613c6cd0126a1f3bf757383ee01cc4c53edcd06d1ea05a
- MD5 03089cae88a1018a7d1699ff81d6bcee
- SHA1 f16880837826c5c2d0a1ca11c7dd2ab6a1be6954
- SHA512 a7fccce158df648bad298b924dce98701b0c11c948332a9617af0520755d8bd6477a56d3c886af6b6dddb51b70f78a53634cb7656f55778b34b142d80d93cb7a
- SSDEEP 6144:sD3IUG5fdVlWOYMx24lkmYL32BJP3gb7KvUbR1y9mYlkLi72:s7IU1OYMrlkmYz2B0VY2i72
- TLSH T1CD749D1176E0C836E2B324720DADD7646A69B8705E35C24F76C1276FAE307D2CA3572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_03089cae88a1018a7d1699ff81d6bcee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_03089cae88a1018a7d1699ff81d6bcee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_03089cae88a1018a7d1699ff81d6bcee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 344KB
- SHA256 617c6dc74f86763021613c6cd0126a1f3bf757383ee01cc4c53edcd06d1ea05a
- MD5 03089cae88a1018a7d1699ff81d6bcee
- SHA1 f16880837826c5c2d0a1ca11c7dd2ab6a1be6954
- SHA512 a7fccce158df648bad298b924dce98701b0c11c948332a9617af0520755d8bd6477a56d3c886af6b6dddb51b70f78a53634cb7656f55778b34b142d80d93cb7a
- SSDEEP 6144:sD3IUG5fdVlWOYMx24lkmYL32BJP3gb7KvUbR1y9mYlkLi72:s7IU1OYMrlkmYz2B0VY2i72
- TLSH T1CD749D1176E0C836E2B324720DADD7646A69B8705E35C24F76C1276FAE307D2CA3572B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory