General
- Target 2026-08-14_498c6eb9e5d916e566b21f446b03b618_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260814-1qq6vasdnc
- SHA256 cba67de3976f1cb4a44e0c0160635866339521d5316dbef2a702bc978dc71122
- MD5 498c6eb9e5d916e566b21f446b03b618
- SHA1 b0a4b84fb2875aeec5d30d1717cbb43d9a4458fd
- SHA512 02549cf1f95b06357757ce879fe093e8bc714c13d756a7d929623308bde3aeff886ff2a45982e040026cc002277c407be293d4334cdb64a412bf71fb487b1e72
- SSDEEP 49152:hOeptLmTrnvcCSgouvAeFfenxyQZXS7uQ0NIq:hdphurnvcCS1uxaxdS7u9
- TLSH T18D954A0277F98529F1B76BB1AABA83645A73FC71BE39D10E5284024E4DB0E509D35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_498c6eb9e5d916e566b21f446b03b618_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_498c6eb9e5d916e566b21f446b03b618_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 cba67de3976f1cb4a44e0c0160635866339521d5316dbef2a702bc978dc71122
- MD5 498c6eb9e5d916e566b21f446b03b618
- SHA1 b0a4b84fb2875aeec5d30d1717cbb43d9a4458fd
- SHA512 02549cf1f95b06357757ce879fe093e8bc714c13d756a7d929623308bde3aeff886ff2a45982e040026cc002277c407be293d4334cdb64a412bf71fb487b1e72
- SSDEEP 49152:hOeptLmTrnvcCSgouvAeFfenxyQZXS7uQ0NIq:hdphurnvcCS1uxaxdS7u9
- TLSH T18D954A0277F98529F1B76BB1AABA83645A73FC71BE39D10E5284024E4DB0E509D35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1