General
- Target 2026-08-17_b74dfa995f1d6e4c9bf0d0628d20bd54_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260817-mp6m9ayanc
- SHA256 3569123edb31cb64081aa80998b570c368313d4b80303337e8f13f323d97edee
- MD5 b74dfa995f1d6e4c9bf0d0628d20bd54
- SHA1 e3aa23e94d00a980f029fc5baf0af47145112999
- SHA512 6ebc0ba6e90251da21191e1d6f360dab85b48cb53b4dd02c5290e1b3ad76daefa7627c34cf3842383460d8c5504585c1f75e48d0e363bf5409283503ad0d2b16
- SSDEEP 24576:zF8hmrQRaluVS/wGs4YSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:BcHIB/RYSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1FD955B02A7F5A1B9F1F36B71DAB583615A77BCB09D39C10E1280266E0DB2B409E71773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_b74dfa995f1d6e4c9bf0d0628d20bd54_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_b74dfa995f1d6e4c9bf0d0628d20bd54_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 3569123edb31cb64081aa80998b570c368313d4b80303337e8f13f323d97edee
- MD5 b74dfa995f1d6e4c9bf0d0628d20bd54
- SHA1 e3aa23e94d00a980f029fc5baf0af47145112999
- SHA512 6ebc0ba6e90251da21191e1d6f360dab85b48cb53b4dd02c5290e1b3ad76daefa7627c34cf3842383460d8c5504585c1f75e48d0e363bf5409283503ad0d2b16
- SSDEEP 24576:zF8hmrQRaluVS/wGs4YSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:BcHIB/RYSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1FD955B02A7F5A1B9F1F36B71DAB583615A77BCB09D39C10E1280266E0DB2B409E71773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1