General
- Target 2026-08-20_792bfed2dac492d5d86cfad2debc0224_amadey_darkgate_elex_smoke-loader
- Size 87KB
- Sample260820-v8hdrssdlb
- SHA256 e8ed70f7ac70b7c638d2b142a27b6c785d014ae4c6bf4f4f052fa4fd8708542a
- MD5 792bfed2dac492d5d86cfad2debc0224
- SHA1 cae7f1d6dcdbdb15f522fba8a127179a7f761d3b
- SHA512 3f75bf719d1b11d1f9bf59b49dedeb1643c82b43c87b307db85c313dc4f848f8753671339aae76018e9243da3117f271f18aad3f6d31c73355a6cb5e9fd5c36e
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTi2:wCCSUacxmurlg0v4iRZCpR
- TLSH T1A493282263E840B2E6761F3CC1B2A6D1062A7D517EF4F14F6E8475D94F732C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_792bfed2dac492d5d86cfad2debc0224_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_792bfed2dac492d5d86cfad2debc0224_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_792bfed2dac492d5d86cfad2debc0224_amadey_darkgate_elex_smoke-loader
- Size 87KB
- SHA256 e8ed70f7ac70b7c638d2b142a27b6c785d014ae4c6bf4f4f052fa4fd8708542a
- MD5 792bfed2dac492d5d86cfad2debc0224
- SHA1 cae7f1d6dcdbdb15f522fba8a127179a7f761d3b
- SHA512 3f75bf719d1b11d1f9bf59b49dedeb1643c82b43c87b307db85c313dc4f848f8753671339aae76018e9243da3117f271f18aad3f6d31c73355a6cb5e9fd5c36e
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTi2:wCCSUacxmurlg0v4iRZCpR
- TLSH T1A493282263E840B2E6761F3CC1B2A6D1062A7D517EF4F14F6E8475D94F732C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.