General
- Target 2026-08-19_4810c4e2df022f6997433704fd52acbc_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260819-yn8a8shk4v
- SHA256 1823a0819abbe191ac7197d966cb2bda6b71e75f807b93b3f4bf3323502e3045
- MD5 4810c4e2df022f6997433704fd52acbc
- SHA1 3fbdd84775d02b092af01f78d04191899d76d061
- SHA512 d93ecbe5fd275ca88bc23dc1609de81d400efb6c3f31911cc0abaf84fa7581de750bfc0856772b4d35b46ca8244040aa5993aebee8c1f3bb40b328204c7429a0
- SSDEEP 49152:izsCu5+/WgG2CaMSgouvAeFfenxyQZXS7uQ0NIq:KnuTgU3S1uxaxdS7u9
- TLSH T1C2955A0627F9412BF1F37B75DABA96A07A777C61AD39C04F5288024E1CB4A54DA31B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_4810c4e2df022f6997433704fd52acbc_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4810c4e2df022f6997433704fd52acbc_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 1823a0819abbe191ac7197d966cb2bda6b71e75f807b93b3f4bf3323502e3045
- MD5 4810c4e2df022f6997433704fd52acbc
- SHA1 3fbdd84775d02b092af01f78d04191899d76d061
- SHA512 d93ecbe5fd275ca88bc23dc1609de81d400efb6c3f31911cc0abaf84fa7581de750bfc0856772b4d35b46ca8244040aa5993aebee8c1f3bb40b328204c7429a0
- SSDEEP 49152:izsCu5+/WgG2CaMSgouvAeFfenxyQZXS7uQ0NIq:KnuTgU3S1uxaxdS7u9
- TLSH T1C2955A0627F9412BF1F37B75DABA96A07A777C61AD39C04F5288024E1CB4A54DA31B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1