General
- Target 2026-08-19_dc826452056eac5b514b0f44f819dbd1_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260819-vslfgs1xc1
- SHA256 15a983271b955ea15b7bc0c1d1ac08266ff8f8e5ddb9c4a50061303016e6f90f
- MD5 dc826452056eac5b514b0f44f819dbd1
- SHA1 68109325d319fa1ddca29a555989dcffd8fcfdc4
- SHA512 c6e0529605c83ccaf4a0b3609701f68f1ae6de5c33bdb720428f324e43148296ef633b5443aeb43303e14cb3318d54759474d887a98d4b8760709ec7239da2b7
- SSDEEP 24576:/rl7uK3mg8vPiDaVgY6NnJchSSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:zMCJchSSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1A2954A4267E84269F5F36B35EAB943745BB67C60AE3DC20FD280135E18B1A509E32773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_dc826452056eac5b514b0f44f819dbd1_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_dc826452056eac5b514b0f44f819dbd1_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_dc826452056eac5b514b0f44f819dbd1_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 15a983271b955ea15b7bc0c1d1ac08266ff8f8e5ddb9c4a50061303016e6f90f
- MD5 dc826452056eac5b514b0f44f819dbd1
- SHA1 68109325d319fa1ddca29a555989dcffd8fcfdc4
- SHA512 c6e0529605c83ccaf4a0b3609701f68f1ae6de5c33bdb720428f324e43148296ef633b5443aeb43303e14cb3318d54759474d887a98d4b8760709ec7239da2b7
- SSDEEP 24576:/rl7uK3mg8vPiDaVgY6NnJchSSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:zMCJchSSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1A2954A4267E84269F5F36B35EAB943745BB67C60AE3DC20FD280135E18B1A509E32773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1