General
- Target 2026-08-19_c04653df66213ba974083e96d212f28a_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- Sample260819-e4xd5adn41
- SHA256 c7643803cc0f9cf63726176d28c87dbc2af090a38cf66919d9dbc22228ce3a4e
- MD5 c04653df66213ba974083e96d212f28a
- SHA1 98557affb75f712bd374529ccc97ec5da1af0088
- SHA512 423968127b5ff6c235b9be24e8e5203d9211108b1874ab94b19d8436be2ff739327870f2f911f5563074f4edcbc158877dbb4670d598c9f7a3360e72bd1f34ed
- SSDEEP 12288:k3Sgouvz0ZRHkXVfeeO4LMneqyQsWSjGQCfLBlS7guN1AnQ6i12NI+:+Sgouvz0ZRHkFfenxyQZXS7gZnQh2NI
- TLSH T13445E50267F94129F1F37B71EEB993645A77BCA1AE39C50E5280025E0DB4A90DE71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_c04653df66213ba974083e96d212f28a_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_c04653df66213ba974083e96d212f28a_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c04653df66213ba974083e96d212f28a_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- SHA256 c7643803cc0f9cf63726176d28c87dbc2af090a38cf66919d9dbc22228ce3a4e
- MD5 c04653df66213ba974083e96d212f28a
- SHA1 98557affb75f712bd374529ccc97ec5da1af0088
- SHA512 423968127b5ff6c235b9be24e8e5203d9211108b1874ab94b19d8436be2ff739327870f2f911f5563074f4edcbc158877dbb4670d598c9f7a3360e72bd1f34ed
- SSDEEP 12288:k3Sgouvz0ZRHkXVfeeO4LMneqyQsWSjGQCfLBlS7guN1AnQ6i12NI+:+Sgouvz0ZRHkFfenxyQZXS7gZnQh2NI
- TLSH T13445E50267F94129F1F37B71EEB993645A77BCA1AE39C50E5280025E0DB4A90DE71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled