General
- Target 2026-08-10_7e94c177db86847b9a246bb3eef01021_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260810-w7fdfszzfw
- SHA256 1b30703066e2d961242a4c2e54ee89ed8e4ef22f48dac40afdd37bb430d031ac
- MD5 7e94c177db86847b9a246bb3eef01021
- SHA1 620d6d75d39a352606d0d95bcccc67c31bc1e9d3
- SHA512 7cfc2980ac39bf9fa0441c971fde73a68ced8778b34f19b7122e9cfcd47944f52e098f4846686156c01d130801edcd3419ac38698b191c7a55cfe918e2f4e4a6
- SSDEEP 49152:d6HNkn4ThlYTM/rRTSgouvAeFfenxyQZXS7uQ0NIq:wWn4Thlp/tTS1uxaxdS7u9
- TLSH T1C695291233F94139F1F37B729AB982745ABA7C69AD39C50E5680121F0DB0A50EE317B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_7e94c177db86847b9a246bb3eef01021_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_7e94c177db86847b9a246bb3eef01021_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_7e94c177db86847b9a246bb3eef01021_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 1b30703066e2d961242a4c2e54ee89ed8e4ef22f48dac40afdd37bb430d031ac
- MD5 7e94c177db86847b9a246bb3eef01021
- SHA1 620d6d75d39a352606d0d95bcccc67c31bc1e9d3
- SHA512 7cfc2980ac39bf9fa0441c971fde73a68ced8778b34f19b7122e9cfcd47944f52e098f4846686156c01d130801edcd3419ac38698b191c7a55cfe918e2f4e4a6
- SSDEEP 49152:d6HNkn4ThlYTM/rRTSgouvAeFfenxyQZXS7uQ0NIq:wWn4Thlp/tTS1uxaxdS7u9
- TLSH T1C695291233F94139F1F37B729AB982745ABA7C69AD39C50E5680121F0DB0A50EE317B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1