General
- Target 2026-08-18_ccc431e1a0ce79aea71b08b90216a5a2_amadey_bkransomware_darkgate_elex_maze_smoke-loader
- Size 952KB
- Sample260818-ltvwwazdld
- SHA256 953dca3b9351d3d07f52c3ce0a722008555d2f19f0b36a6f6bba477d7fa7175c
- MD5 ccc431e1a0ce79aea71b08b90216a5a2
- SHA1 60b8e91f3c361ac80678b24f953696f5c62c15b2
- SHA512 cdffcfaf537e40d6645c99a77728c3e720b1390032736965ecf66e1e64448cf03ab6ebce3ec454573349b0664872af7c268bc9b84aa90aaa2fc0dbf71a509dc9
- SSDEEP 12288:zX+sJ8yKGga8UTyPA0/Reotp1+vkV/sqrwu+aveQaiLt4vAI82e:7+sCx7NTY0/Ryqk1s4vAI8Z
- TLSH T1B8257C367AE1803FD173433188FD6267B5BA7C223835690B63D62B2D0B716927E5462F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_ccc431e1a0ce79aea71b08b90216a5a2_amadey_bkransomware_darkgate_elex_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_ccc431e1a0ce79aea71b08b90216a5a2_amadey_bkransomware_darkgate_elex_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_ccc431e1a0ce79aea71b08b90216a5a2_amadey_bkransomware_darkgate_elex_maze_smoke-loader
- Size 952KB
- SHA256 953dca3b9351d3d07f52c3ce0a722008555d2f19f0b36a6f6bba477d7fa7175c
- MD5 ccc431e1a0ce79aea71b08b90216a5a2
- SHA1 60b8e91f3c361ac80678b24f953696f5c62c15b2
- SHA512 cdffcfaf537e40d6645c99a77728c3e720b1390032736965ecf66e1e64448cf03ab6ebce3ec454573349b0664872af7c268bc9b84aa90aaa2fc0dbf71a509dc9
- SSDEEP 12288:zX+sJ8yKGga8UTyPA0/Reotp1+vkV/sqrwu+aveQaiLt4vAI82e:7+sCx7NTY0/Ryqk1s4vAI8Z
- TLSH T1B8257C367AE1803FD173433188FD6267B5BA7C223835690B63D62B2D0B716927E5462F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.