General
- Target 2026-08-17_ad05ee404e20110254d88476d4b43ac9_darkgate_elex_mafia_smoke-loader
- Size 2.2MB
- Sample260818-aam65ssxcv
- SHA256 f953fae29433958363164803db0528f8d2790b77cd253cef439e258596727dbc
- MD5 ad05ee404e20110254d88476d4b43ac9
- SHA1 f033a78f71588dbff2b5f8efae4f0d21a3856b27
- SHA512 0b333a1a02167fd662f592c3d99918618dbe387999b638523b1a7938ef6c7c0528bb590778912b4b48cee0d281d4a2e6a3a4bd679e4d94d46a6de0ab555b1755
- SSDEEP 49152:QE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/5ionurM0EIMa17Q/lFTjN4:Qrj834iwJjn7gu5LmMapuN/iMurM0ALm
- TLSH T1AFA5CF3136508077C63B32319B9AA3BDB7FAA5304D75524B66910E3C2E706D3A92C76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_ad05ee404e20110254d88476d4b43ac9_darkgate_elex_mafia_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ad05ee404e20110254d88476d4b43ac9_darkgate_elex_mafia_smoke-loader
- Size 2.2MB
- SHA256 f953fae29433958363164803db0528f8d2790b77cd253cef439e258596727dbc
- MD5 ad05ee404e20110254d88476d4b43ac9
- SHA1 f033a78f71588dbff2b5f8efae4f0d21a3856b27
- SHA512 0b333a1a02167fd662f592c3d99918618dbe387999b638523b1a7938ef6c7c0528bb590778912b4b48cee0d281d4a2e6a3a4bd679e4d94d46a6de0ab555b1755
- SSDEEP 49152:QE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/5ionurM0EIMa17Q/lFTjN4:Qrj834iwJjn7gu5LmMapuN/iMurM0ALm
- TLSH T1AFA5CF3136508077C63B32319B9AA3BDB7FAA5304D75524B66910E3C2E706D3A92C76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1