General
- Target 2026-08-13_ce07d0874fce98c799997987ef9581e3_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260813-we9ftscd33
- SHA256 04253e9b3b21c96f3bcd0c5b4401b3a8b893d9ebf1c278822c546b0c3f939fbc
- MD5 ce07d0874fce98c799997987ef9581e3
- SHA1 b84e1b28771a038d0ec8ababe38a5ca29a79d03f
- SHA512 945843362adc7d69bce2bfbcb09bd404e41f7fb9864770df577274c00bfd0e7c05fd937e4e54f1a30171ade099c23454ed9682328bec25d425853d7b83f9f246
- SSDEEP 49152:QqryU18jb3adt/ZCWlSgouvAeFfenxyQZXS7uQ0NIq:Qqyj+7ZCWlS1uxaxdS7u9
- TLSH T1D0953A06A3F94529F1F36B70DEB943A0DA677D619E39C60F1284325F18B4A589E32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_ce07d0874fce98c799997987ef9581e3_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_ce07d0874fce98c799997987ef9581e3_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_ce07d0874fce98c799997987ef9581e3_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 04253e9b3b21c96f3bcd0c5b4401b3a8b893d9ebf1c278822c546b0c3f939fbc
- MD5 ce07d0874fce98c799997987ef9581e3
- SHA1 b84e1b28771a038d0ec8ababe38a5ca29a79d03f
- SHA512 945843362adc7d69bce2bfbcb09bd404e41f7fb9864770df577274c00bfd0e7c05fd937e4e54f1a30171ade099c23454ed9682328bec25d425853d7b83f9f246
- SSDEEP 49152:QqryU18jb3adt/ZCWlSgouvAeFfenxyQZXS7uQ0NIq:Qqyj+7ZCWlS1uxaxdS7u9
- TLSH T1D0953A06A3F94529F1F36B70DEB943A0DA677D619E39C60F1284325F18B4A589E32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1