General
- Target 2026-08-19_ba1d70248844b0e99ce442fde02b6f8b_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260819-jscb2azdkh
- SHA256 5b73e9873c8dc961c2b321fe3afdbae677f3c4e1fa86366ad6e40ce8ce2df1ba
- MD5 ba1d70248844b0e99ce442fde02b6f8b
- SHA1 e208953bcbbc53e1725cd8119760f4b0814ca0ae
- SHA512 0cdec2bd5d587f54dbd678de743f426dd2bc0abf7936e9438e677a7ef1a4213b7601b97a5664eda114275aa0a961cb00a7602295e2828f9ed91a8ddb9bb0fabc
- SSDEEP 24576:ieX3O44bX2FDWS6EkI07Sgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:3mX2FDm7SgouvAeFfenxyQZXS7uQ0NIq
- TLSH T162955C0267F94169F2F37B70DEB983B56B777E71AD3AC10E5284214E09B0A50AA31773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ba1d70248844b0e99ce442fde02b6f8b_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ba1d70248844b0e99ce442fde02b6f8b_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 5b73e9873c8dc961c2b321fe3afdbae677f3c4e1fa86366ad6e40ce8ce2df1ba
- MD5 ba1d70248844b0e99ce442fde02b6f8b
- SHA1 e208953bcbbc53e1725cd8119760f4b0814ca0ae
- SHA512 0cdec2bd5d587f54dbd678de743f426dd2bc0abf7936e9438e677a7ef1a4213b7601b97a5664eda114275aa0a961cb00a7602295e2828f9ed91a8ddb9bb0fabc
- SSDEEP 24576:ieX3O44bX2FDWS6EkI07Sgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:3mX2FDm7SgouvAeFfenxyQZXS7uQ0NIq
- TLSH T162955C0267F94169F2F37B70DEB983B56B777E71AD3AC10E5284214E09B0A50AA31773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1