General
- Target 2026-08-20_0e2188ce30d2127151ecc353eedd49b5_amadey_darkgate_elex_icedid_rhadamanthys_smoke-loader_stealc_stop
- Size 2.6MB
- Sample260820-x1mdvstgmf
- SHA256 e7036307db0ac30750ae9788db6d24a0171fb99481a9a3444860d30770a38fcb
- MD5 0e2188ce30d2127151ecc353eedd49b5
- SHA1 2f28d2b05008f4ed61a1d1822f029f65843c0afa
- SHA512 1f9ef940be1fb5e6c86cb869e47714f8b24c19e8478e44c05b8d2c67936d5b9ca1f2e86d55833e5bf473c3e7aa92a9c6f030272a8a7b88e2f1ad9b89afe757d1
- SSDEEP 49152:aGYGkQnqX840aM2bk8xSybIMjpNMiJ99G5zr/4iK1dMAv:aUDY8Qhbk8xSy0MVN/JGpr/4iK
- TLSH T13AC52AB176A3F06FC3AE2531610B7325A2F5EF2186B4496739D0FE3519300A7992AD37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0e2188ce30d2127151ecc353eedd49b5_amadey_darkgate_elex_icedid_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0e2188ce30d2127151ecc353eedd49b5_amadey_darkgate_elex_icedid_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0e2188ce30d2127151ecc353eedd49b5_amadey_darkgate_elex_icedid_rhadamanthys_smoke-loader_stealc_stop
- Size 2.6MB
- SHA256 e7036307db0ac30750ae9788db6d24a0171fb99481a9a3444860d30770a38fcb
- MD5 0e2188ce30d2127151ecc353eedd49b5
- SHA1 2f28d2b05008f4ed61a1d1822f029f65843c0afa
- SHA512 1f9ef940be1fb5e6c86cb869e47714f8b24c19e8478e44c05b8d2c67936d5b9ca1f2e86d55833e5bf473c3e7aa92a9c6f030272a8a7b88e2f1ad9b89afe757d1
- SSDEEP 49152:aGYGkQnqX840aM2bk8xSybIMjpNMiJ99G5zr/4iK1dMAv:aUDY8Qhbk8xSy0MVN/JGpr/4iK
- TLSH T13AC52AB176A3F06FC3AE2531610B7325A2F5EF2186B4496739D0FE3519300A7992AD37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE