General
- Target 2026-08-15_afe617ccea01c842955236f3258f9630_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260815-kz15eattf1
- SHA256 63aff634057190fbee7154769c95a9aca5ee0ff12520c2b999dfa1c6b6f36262
- MD5 afe617ccea01c842955236f3258f9630
- SHA1 bb18cf0c7ade5f45f230e41dd1e7fd8a5c2c0137
- SHA512 f9bc9862fd445eeda09b7ef494b8b09d097aae7fccc93c6a7170e2659431d43bb6b8047b3585d98c21a550a8d2eaa2a9e8a66557e7db16ee98deae9770cf88da
- SSDEEP 49152:VUe5PWpgZUz0fCEIRAiq/bOTHlSgouvAeFfenxyQZXS7uQ0NIq:21yu0fC5RAiq/bOTFS1uxaxdS7u9
- TLSH T194956BC673F64029F6F32BB1DAB983705B777C769D39C14E02A4126E0874A509AB5B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_afe617ccea01c842955236f3258f9630_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_afe617ccea01c842955236f3258f9630_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_afe617ccea01c842955236f3258f9630_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 63aff634057190fbee7154769c95a9aca5ee0ff12520c2b999dfa1c6b6f36262
- MD5 afe617ccea01c842955236f3258f9630
- SHA1 bb18cf0c7ade5f45f230e41dd1e7fd8a5c2c0137
- SHA512 f9bc9862fd445eeda09b7ef494b8b09d097aae7fccc93c6a7170e2659431d43bb6b8047b3585d98c21a550a8d2eaa2a9e8a66557e7db16ee98deae9770cf88da
- SSDEEP 49152:VUe5PWpgZUz0fCEIRAiq/bOTHlSgouvAeFfenxyQZXS7uQ0NIq:21yu0fC5RAiq/bOTFS1uxaxdS7u9
- TLSH T194956BC673F64029F6F32BB1DAB983705B777C769D39C14E02A4126E0874A509AB5B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1