General
- Target 2026-08-14_f12ecc60547ae7d37f1bf861db74e92b_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260814-ssgfeswepc
- SHA256 c36220fca907ee6fedb7e3b11aee03f63105d2c339e8a3048a2217f55645f223
- MD5 f12ecc60547ae7d37f1bf861db74e92b
- SHA1 775dd2662410f921ec56078e83511798e5de3d2c
- SHA512 8f1966842e552337b215ed2271adae428ae5c7717e56cf0dc911df2b5b0936821f5ae17cb04a8b010e933b45c213c15a4a39e51936bb52392c73c2fc00e63006
- SSDEEP 24576:aRxry+ojvSIl+o+1fEqF5Vip3Sgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:+0aEtSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T17C954A0237ED4069F1F36B719EB943656A77FC64ED3AC20F1280125E1AB4AA1DA31773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_f12ecc60547ae7d37f1bf861db74e92b_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_f12ecc60547ae7d37f1bf861db74e92b_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 c36220fca907ee6fedb7e3b11aee03f63105d2c339e8a3048a2217f55645f223
- MD5 f12ecc60547ae7d37f1bf861db74e92b
- SHA1 775dd2662410f921ec56078e83511798e5de3d2c
- SHA512 8f1966842e552337b215ed2271adae428ae5c7717e56cf0dc911df2b5b0936821f5ae17cb04a8b010e933b45c213c15a4a39e51936bb52392c73c2fc00e63006
- SSDEEP 24576:aRxry+ojvSIl+o+1fEqF5Vip3Sgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:+0aEtSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T17C954A0237ED4069F1F36B719EB943656A77FC64ED3AC20F1280125E1AB4AA1DA31773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1