General
- Target 2026-08-13_d7f5683fbf60ec715892d02b44ad399f_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260813-tyaeqss1bt
- SHA256 11690bcb04204927bf553c1df21648f1ea14bc478c078fd251d80be072cba003
- MD5 d7f5683fbf60ec715892d02b44ad399f
- SHA1 047600ecdbefb3786acff0f0d6a6b528cd642e67
- SHA512 068c20d9a7d05fa8166010d1ae4ba2a1caeb82035764837b805c67a71aac2f38614331c699799173c0c369607f9b2f3e6e59d0021f8ecac8056afbf69c206567
- SSDEEP 49152:RP0BY5zIgMsQEiSgouvAeFfenxyQZXS7uQ0NIq:R95ktsQzS1uxaxdS7u9
- TLSH T13C954A1327F9412AF1F36B70DBBA9764AA777C61AD3BC10E5280165E0DB4A909B31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_d7f5683fbf60ec715892d02b44ad399f_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d7f5683fbf60ec715892d02b44ad399f_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 11690bcb04204927bf553c1df21648f1ea14bc478c078fd251d80be072cba003
- MD5 d7f5683fbf60ec715892d02b44ad399f
- SHA1 047600ecdbefb3786acff0f0d6a6b528cd642e67
- SHA512 068c20d9a7d05fa8166010d1ae4ba2a1caeb82035764837b805c67a71aac2f38614331c699799173c0c369607f9b2f3e6e59d0021f8ecac8056afbf69c206567
- SSDEEP 49152:RP0BY5zIgMsQEiSgouvAeFfenxyQZXS7uQ0NIq:R95ktsQzS1uxaxdS7u9
- TLSH T13C954A1327F9412AF1F36B70DBBA9764AA777C61AD3BC10E5280165E0DB4A909B31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1