General
- Target 2026-08-14_8fb21d724171d5fe364afad94c80117a_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260814-qdacfsvthv
- SHA256 ffeb8d34568ccd13a4dfc18657845762ce86280a79d8f91ba75947fa924afad1
- MD5 8fb21d724171d5fe364afad94c80117a
- SHA1 759f337f00510fbe9779d5bea8bf42a471850f2b
- SHA512 7525d1d5f3a2ff6c8bcd2387988f0d50ac952065c98b2aa44437074e0004b0baa17c6ec68dc8eb22ba9ec95edef9a047585388d4f2ad33ab749b26bc11651703
- SSDEEP 24576:0XHy24LL18DfpelSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:0XHy/mAlSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T10B954A0677F94125F1F36B359EB943745A777C61BE39C12E9280215F0EB0AA0AA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_8fb21d724171d5fe364afad94c80117a_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_8fb21d724171d5fe364afad94c80117a_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 ffeb8d34568ccd13a4dfc18657845762ce86280a79d8f91ba75947fa924afad1
- MD5 8fb21d724171d5fe364afad94c80117a
- SHA1 759f337f00510fbe9779d5bea8bf42a471850f2b
- SHA512 7525d1d5f3a2ff6c8bcd2387988f0d50ac952065c98b2aa44437074e0004b0baa17c6ec68dc8eb22ba9ec95edef9a047585388d4f2ad33ab749b26bc11651703
- SSDEEP 24576:0XHy24LL18DfpelSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:0XHy/mAlSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T10B954A0677F94125F1F36B359EB943745A777C61BE39C12E9280215F0EB0AA0AA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1