General
- Target 2026-08-13_86e954d28554586f4cee33b871f9e405_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260813-t53d4athjg
- SHA256 f0cbde4416740933b7f5063944cadb8b4aa785c2b523a742de21fe7e0b1f5cd4
- MD5 86e954d28554586f4cee33b871f9e405
- SHA1 3ccfea0602426863fb5ab6b93248fb689c668089
- SHA512 eb3a61355cf51d4fe036e5bc11812d322cb69fe80b0ca30dd7eacdbd6bc76ef336547fd133de1ca24f45ed232dd48f8499f55d146cdd35a7766300ae1a2b3c08
- SSDEEP 49152:Nu8CW48s3yIJhYT/SgouvAeFfenxyQZXS7uQ0NIq:ZPssTS1uxaxdS7u9
- TLSH T158954A1263F88129F1B77B75DAF9A2F45A73FC616D79C10F12A4125E08B0B909A31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_86e954d28554586f4cee33b871f9e405_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_86e954d28554586f4cee33b871f9e405_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_86e954d28554586f4cee33b871f9e405_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 f0cbde4416740933b7f5063944cadb8b4aa785c2b523a742de21fe7e0b1f5cd4
- MD5 86e954d28554586f4cee33b871f9e405
- SHA1 3ccfea0602426863fb5ab6b93248fb689c668089
- SHA512 eb3a61355cf51d4fe036e5bc11812d322cb69fe80b0ca30dd7eacdbd6bc76ef336547fd133de1ca24f45ed232dd48f8499f55d146cdd35a7766300ae1a2b3c08
- SSDEEP 49152:Nu8CW48s3yIJhYT/SgouvAeFfenxyQZXS7uQ0NIq:ZPssTS1uxaxdS7u9
- TLSH T158954A1263F88129F1B77B75DAF9A2F45A73FC616D79C10F12A4125E08B0B909A31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1