General
- Target 2026-08-21_3947fd508117cb4528ba7c809fcabdd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_swisyn
- Size 186KB
- Sample260821-fb2zkshf73
- SHA256 7cec0851e902c554098b338feb42bf1722ae43a6c65936f247525263b9cc50a5
- MD5 3947fd508117cb4528ba7c809fcabdd1
- SHA1 01e4246195fc88ff28a2159b8a658f80b11dd67e
- SHA512 fcde43318968f812bc4f6f1caf4b61d365959199066716b9bdb9a9d4b74694c238aafb8d0464d13e2458bb122fa4f99d82ab3d3a83f6380991a1d764d6d7507f
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalRJXbeFK2JSGOu0:UsLqdufVUNDaNXb0K2Jsb
- TLSH T12B144C237F50D43BDC6284F068B5E25ABA2A2D320BA49E07B755BB152A71743B5F430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_3947fd508117cb4528ba7c809fcabdd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_3947fd508117cb4528ba7c809fcabdd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_3947fd508117cb4528ba7c809fcabdd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_swisyn
- Size 186KB
- SHA256 7cec0851e902c554098b338feb42bf1722ae43a6c65936f247525263b9cc50a5
- MD5 3947fd508117cb4528ba7c809fcabdd1
- SHA1 01e4246195fc88ff28a2159b8a658f80b11dd67e
- SHA512 fcde43318968f812bc4f6f1caf4b61d365959199066716b9bdb9a9d4b74694c238aafb8d0464d13e2458bb122fa4f99d82ab3d3a83f6380991a1d764d6d7507f
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalRJXbeFK2JSGOu0:UsLqdufVUNDaNXb0K2Jsb
- TLSH T12B144C237F50D43BDC6284F068B5E25ABA2A2D320BA49E07B755BB152A71743B5F430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory