General
- Target 2026-08-10_1dc3ac2d3a9b0e6c0d98ee41389524f8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- Sample260810-mvw11a11bw
- SHA256 719f113a856459ac071fbaca57b9e8167dce2f63c4b65ea55037be11c1dae791
- MD5 1dc3ac2d3a9b0e6c0d98ee41389524f8
- SHA1 b7cf494c59f8e08319cbf01e8eb0ea4a8cb796eb
- SHA512 97073120a233260aa1cf77f458ca1b69c3908c075cc64fdd4db51a5674a1b123aa0aa24f276dcaa16eda2f736c7696968ba6a738ba94590d3bf2d660c2ced5d7
- SSDEEP 12288:k3Sgouvz0ZRHkXVfeeO4LMneqyQsWSjGQCfLBlS7guN1AnQ6i12NI+:+Sgouvz0ZRHkFfenxyQZXS7gZnQh2NI
- TLSH T19B45E50267F94129F1F37B71EEB993645A77BCA1AE39C50E5280025E0DB4A90DE71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1dc3ac2d3a9b0e6c0d98ee41389524f8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1dc3ac2d3a9b0e6c0d98ee41389524f8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1dc3ac2d3a9b0e6c0d98ee41389524f8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- SHA256 719f113a856459ac071fbaca57b9e8167dce2f63c4b65ea55037be11c1dae791
- MD5 1dc3ac2d3a9b0e6c0d98ee41389524f8
- SHA1 b7cf494c59f8e08319cbf01e8eb0ea4a8cb796eb
- SHA512 97073120a233260aa1cf77f458ca1b69c3908c075cc64fdd4db51a5674a1b123aa0aa24f276dcaa16eda2f736c7696968ba6a738ba94590d3bf2d660c2ced5d7
- SSDEEP 12288:k3Sgouvz0ZRHkXVfeeO4LMneqyQsWSjGQCfLBlS7guN1AnQ6i12NI+:+Sgouvz0ZRHkFfenxyQZXS7gZnQh2NI
- TLSH T19B45E50267F94129F1F37B71EEB993645A77BCA1AE39C50E5280025E0DB4A90DE71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled