General
- Target 2026-08-17_885ac018632739170d58b71f9a0d918f_darkgate_elex_mafia_smoke-loader
- Size 2.2MB
- Sample260818-agy7zssdnc
- SHA256 3108d3caa2861332f83c92cf579eb674e919a37e87f2c72436577d65b21c839c
- MD5 885ac018632739170d58b71f9a0d918f
- SHA1 054def75e9e1663f17c5e2cc663e5629e9af7915
- SHA512 20e3b9e07a2985d016170fed7af799990edc944c98f8b3b8e2ff8c9f1e64b737b7192eae98ebdfeaa77d4446994a9cfb971b1e699f9e33fbb750ab8a7516e1dc
- SSDEEP 49152:1E4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/5ionurM0EIMa17Q/lFTjN4:1rj834iwJjn7gu5LmMapuN/iMurM0ALm
- TLSH T1F9A5BF3136508077C63B32319B9AA3BDB7FAA5304D75524B66910E3C2E706D3A92C76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_885ac018632739170d58b71f9a0d918f_darkgate_elex_mafia_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_885ac018632739170d58b71f9a0d918f_darkgate_elex_mafia_smoke-loader
- Size 2.2MB
- SHA256 3108d3caa2861332f83c92cf579eb674e919a37e87f2c72436577d65b21c839c
- MD5 885ac018632739170d58b71f9a0d918f
- SHA1 054def75e9e1663f17c5e2cc663e5629e9af7915
- SHA512 20e3b9e07a2985d016170fed7af799990edc944c98f8b3b8e2ff8c9f1e64b737b7192eae98ebdfeaa77d4446994a9cfb971b1e699f9e33fbb750ab8a7516e1dc
- SSDEEP 49152:1E4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/5ionurM0EIMa17Q/lFTjN4:1rj834iwJjn7gu5LmMapuN/iMurM0ALm
- TLSH T1F9A5BF3136508077C63B32319B9AA3BDB7FAA5304D75524B66910E3C2E706D3A92C76F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1