General
- Target 2026-08-12_d8bf99b702f8e831da7a045689b349e6_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260812-xge6fadj2s
- SHA256 e530545ab897e18632d9a82cd5f28dd6735822bb74bda5ef737fbb1378938671
- MD5 d8bf99b702f8e831da7a045689b349e6
- SHA1 393785476cd98c98dc1364f2b03ad7387e317c3b
- SHA512 e5303a647d512bb3610eb7090fd62c42aaab8f73555f26213533c6e063fa1f298e6728cf1ceb6ea43644d57b219317bb6981a33c245809a361db1ebb7cd75bf9
- SSDEEP 49152:l7SlGktwLXOGcoNs0tbyvwy2UH7dQTLT3yXBOnpRYMS2t3wkjQYcyssYSGsaWApc:l+kk+Dces0tbyvwy2UH7dQTLT3GBOnp1
- TLSH T117953B1267F94128F1F37B72AABA9360DE67BC619D39C60EA280135E0C74B549D36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_d8bf99b702f8e831da7a045689b349e6_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_d8bf99b702f8e831da7a045689b349e6_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 e530545ab897e18632d9a82cd5f28dd6735822bb74bda5ef737fbb1378938671
- MD5 d8bf99b702f8e831da7a045689b349e6
- SHA1 393785476cd98c98dc1364f2b03ad7387e317c3b
- SHA512 e5303a647d512bb3610eb7090fd62c42aaab8f73555f26213533c6e063fa1f298e6728cf1ceb6ea43644d57b219317bb6981a33c245809a361db1ebb7cd75bf9
- SSDEEP 49152:l7SlGktwLXOGcoNs0tbyvwy2UH7dQTLT3yXBOnpRYMS2t3wkjQYcyssYSGsaWApc:l+kk+Dces0tbyvwy2UH7dQTLT3GBOnp1
- TLSH T117953B1267F94128F1F37B72AABA9360DE67BC619D39C60EA280135E0C74B549D36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1