General
- Target 2026-08-19_93a9669b16133b723a6a2f48f6c4e2fb_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260819-p98dpafc26
- SHA256 54ee70afe8bf87d4ba62a9ed7a9907f5ef34bac19a87a04f6b71152239505548
- MD5 93a9669b16133b723a6a2f48f6c4e2fb
- SHA1 2aed33d7427ec20c068520f929ef2fdb631f990d
- SHA512 4828009ab7aaf2f99e0a1bcf45c67ed906024c8d7b731dfd7a79800cf8c6271d897d107dbdaf6606c4b78ad9deb72c636b16916496ef7102c21d829d1e9b6317
- SSDEEP 24576:hY9G7tac+SR7MjASgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:S9ckU7JSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T19495390267F94229F0B37F70DAFD87605B77BEA09D39C10F12A0125E89B4A549A32777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_93a9669b16133b723a6a2f48f6c4e2fb_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_93a9669b16133b723a6a2f48f6c4e2fb_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_93a9669b16133b723a6a2f48f6c4e2fb_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 54ee70afe8bf87d4ba62a9ed7a9907f5ef34bac19a87a04f6b71152239505548
- MD5 93a9669b16133b723a6a2f48f6c4e2fb
- SHA1 2aed33d7427ec20c068520f929ef2fdb631f990d
- SHA512 4828009ab7aaf2f99e0a1bcf45c67ed906024c8d7b731dfd7a79800cf8c6271d897d107dbdaf6606c4b78ad9deb72c636b16916496ef7102c21d829d1e9b6317
- SSDEEP 24576:hY9G7tac+SR7MjASgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:S9ckU7JSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T19495390267F94229F0B37F70DAFD87605B77BEA09D39C10F12A0125E89B4A549A32777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1