General
- Target 2026-08-16_9e8b9f5113fa24c5eb36513e59881dfa_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260816-qw1mcsdf53
- SHA256 4890a0e9012b32a05a464c0883d7e696f23d04ece964467489923027b888354a
- MD5 9e8b9f5113fa24c5eb36513e59881dfa
- SHA1 5419639b71a15d5814f0d55264d292125f28480f
- SHA512 616ebcd6ad7a8b0d340f748a5e8257d2b427cf6f06f93ba72f7095d03668383b8cabaf2cad5dd2887c2827954e505cbc3360c8479fefd83d8a48803bd1773aa6
- SSDEEP 49152:OJlC6tkxctU7SgouvAeFfenxyQZXS7uQ0NIq:ol4StMS1uxaxdS7u9
- TLSH T19F955B2267F58139F1F37B31EAF992709A7B7C61AD39C00E5288129E4DB0E949935733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9e8b9f5113fa24c5eb36513e59881dfa_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9e8b9f5113fa24c5eb36513e59881dfa_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9e8b9f5113fa24c5eb36513e59881dfa_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 4890a0e9012b32a05a464c0883d7e696f23d04ece964467489923027b888354a
- MD5 9e8b9f5113fa24c5eb36513e59881dfa
- SHA1 5419639b71a15d5814f0d55264d292125f28480f
- SHA512 616ebcd6ad7a8b0d340f748a5e8257d2b427cf6f06f93ba72f7095d03668383b8cabaf2cad5dd2887c2827954e505cbc3360c8479fefd83d8a48803bd1773aa6
- SSDEEP 49152:OJlC6tkxctU7SgouvAeFfenxyQZXS7uQ0NIq:ol4StMS1uxaxdS7u9
- TLSH T19F955B2267F58139F1F37B31EAF992709A7B7C61AD39C00E5288129E4DB0E949935733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1