General
- Target 2026-08-15_26279949f83b233de2e33539517b9bb6_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260816-a6ff6saq2t
- SHA256 7b1b8bf40c7ec4fd93c524332416dca872d343808b337bac1d45ee3885caed99
- MD5 26279949f83b233de2e33539517b9bb6
- SHA1 d7db495fc7900ccd6fe06ad5fb593b14061d3cc4
- SHA512 fd757f3fbd5dae9dad0c0fe9dfc951ed7f36a6e3491591f096f47f5fe56a1eefa48443f67ee497bb586c49d61d5917dd2a13385de5642e0550f05f14fcc30886
- SSDEEP 24576:pS347pJdJf/E0o2amd3Sgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:SwJrVVSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T137953822B7E94129F1F37B71DFB983605AF27C616D79C92E7280136E18B0A509A71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_26279949f83b233de2e33539517b9bb6_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_26279949f83b233de2e33539517b9bb6_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_26279949f83b233de2e33539517b9bb6_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 7b1b8bf40c7ec4fd93c524332416dca872d343808b337bac1d45ee3885caed99
- MD5 26279949f83b233de2e33539517b9bb6
- SHA1 d7db495fc7900ccd6fe06ad5fb593b14061d3cc4
- SHA512 fd757f3fbd5dae9dad0c0fe9dfc951ed7f36a6e3491591f096f47f5fe56a1eefa48443f67ee497bb586c49d61d5917dd2a13385de5642e0550f05f14fcc30886
- SSDEEP 24576:pS347pJdJf/E0o2amd3Sgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:SwJrVVSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T137953822B7E94129F1F37B71DFB983605AF27C616D79C92E7280136E18B0A509A71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1