General
- Target 2026-08-20_11814e1108e27da63dd507fbdd4d4cbf_amadey_darkgate_elex_smoke-loader
- Size 87KB
- Sample260821-ba892sdr9w
- SHA256 99835de2c67f3407d0054900a78dfbf55e6b1988dd6f147eb39e7a6fbafe83d5
- MD5 11814e1108e27da63dd507fbdd4d4cbf
- SHA1 3ffc24ab94140c839ce575f69505affc9f69cbea
- SHA512 c76f5c8911669cad20c914d5aa788b366dce138d535641fdeae45f05013f2720a67479e63d2cba95fbbf10ab31b56f7bb9fef52b1b5f4130169ecd236f8bbcf3
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiE:wCCSUacxmurlg0v4iRZCpf
- TLSH T15B93282163E840B2E6761F3CC1B2A6D1062A7D517EF4F14F6E8475D94F732C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_11814e1108e27da63dd507fbdd4d4cbf_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_11814e1108e27da63dd507fbdd4d4cbf_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_11814e1108e27da63dd507fbdd4d4cbf_amadey_darkgate_elex_smoke-loader
- Size 87KB
- SHA256 99835de2c67f3407d0054900a78dfbf55e6b1988dd6f147eb39e7a6fbafe83d5
- MD5 11814e1108e27da63dd507fbdd4d4cbf
- SHA1 3ffc24ab94140c839ce575f69505affc9f69cbea
- SHA512 c76f5c8911669cad20c914d5aa788b366dce138d535641fdeae45f05013f2720a67479e63d2cba95fbbf10ab31b56f7bb9fef52b1b5f4130169ecd236f8bbcf3
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiE:wCCSUacxmurlg0v4iRZCpf
- TLSH T15B93282163E840B2E6761F3CC1B2A6D1062A7D517EF4F14F6E8475D94F732C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.