General
- Target 2026-08-14_30cc10547ffc13330ce3b96750ae0b68_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- Sample260814-mps26a1fja
- SHA256 61a9ccf7d7186013e4543d38469bee4448a3d14ee59bf34de4ce712fbb3081c9
- MD5 30cc10547ffc13330ce3b96750ae0b68
- SHA1 c16737e580d0506dbf9a9c71af49d8f83fa80516
- SHA512 ba1530b26081615bf523157c49a25c9877eea5bab357da40337a96186609f28ae739dd1271530e1657fc8d333cfb5cf3c3f4c3a0b3a4aaaab198109761f02b21
- SSDEEP 24576:KdzFuqUmS8S6yCN4+eFQTQwqlRY5NPTCKLZXcBgYTsdW65M:KVFuqSiyCNeFF85NPTCKLZUgdW6G
- TLSH T193757C0277F99139F1F37BB0AEB992645A777C61AD39C50E26C1215E09B4E80DA31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_30cc10547ffc13330ce3b96750ae0b68_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_30cc10547ffc13330ce3b96750ae0b68_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_30cc10547ffc13330ce3b96750ae0b68_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- SHA256 61a9ccf7d7186013e4543d38469bee4448a3d14ee59bf34de4ce712fbb3081c9
- MD5 30cc10547ffc13330ce3b96750ae0b68
- SHA1 c16737e580d0506dbf9a9c71af49d8f83fa80516
- SHA512 ba1530b26081615bf523157c49a25c9877eea5bab357da40337a96186609f28ae739dd1271530e1657fc8d333cfb5cf3c3f4c3a0b3a4aaaab198109761f02b21
- SSDEEP 24576:KdzFuqUmS8S6yCN4+eFQTQwqlRY5NPTCKLZXcBgYTsdW65M:KVFuqSiyCNeFF85NPTCKLZUgdW6G
- TLSH T193757C0277F99139F1F37BB0AEB992645A777C61AD39C50E26C1215E09B4E80DA31733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1