General
- Target 2026-08-12_bf3ec55ceee325c5fedc9c90aa610358_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260812-lsf2bs1vat
- SHA256 8cdfea454775b146cc273f7f09bbe2bac853a397a52ef2aaf7bd80cd93a23bfa
- MD5 bf3ec55ceee325c5fedc9c90aa610358
- SHA1 9a5093dec07c06cd1b1dc0bca18403a6260e9034
- SHA512 b04c536dd851afce014c9303ade05fb48b5e3fc8a0ef2d0d04eb874c69a4881192ceb7f441889b547962ceaa69355ce4807c4a31b69ad5964adcca53f1c4ed04
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiw4:wCCSUacxmurlg0v4iRZCpS
- TLSH T1BA93282163E800B2E2765F3CC1B2A6D1062A7D527EF1F54F6D8431D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_bf3ec55ceee325c5fedc9c90aa610358_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_bf3ec55ceee325c5fedc9c90aa610358_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_bf3ec55ceee325c5fedc9c90aa610358_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 8cdfea454775b146cc273f7f09bbe2bac853a397a52ef2aaf7bd80cd93a23bfa
- MD5 bf3ec55ceee325c5fedc9c90aa610358
- SHA1 9a5093dec07c06cd1b1dc0bca18403a6260e9034
- SHA512 b04c536dd851afce014c9303ade05fb48b5e3fc8a0ef2d0d04eb874c69a4881192ceb7f441889b547962ceaa69355ce4807c4a31b69ad5964adcca53f1c4ed04
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiw4:wCCSUacxmurlg0v4iRZCpS
- TLSH T1BA93282163E800B2E2765F3CC1B2A6D1062A7D527EF1F54F6D8431D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.