General
- Target 2026-08-22_a1ad4830ffc609f3da3d5363131f1fef_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- Sample260823-d6bd1asdnh
- SHA256 db50f0086bdff97c9c310431cbfa6d085e4547f05b4dbe83e867fee13efbc538
- MD5 a1ad4830ffc609f3da3d5363131f1fef
- SHA1 7d24aae1bb354b7ebbd84e623dc630f45f454375
- SHA512 e771c247bbe31d0a087d081e36b0e0bf259ac850d493c79ebe8a7217a20137a090f2ad8a10198858e7f685f851e0d85bf2e72edfd01fe35fb2347ea4a11fc16b
- SSDEEP 24576:ZcuzKPgsOStPUvgl+dPgA4A2notVQBU9OOyjaKSdzs:ZhKPgsOSt2gEd0ACIihOKSdzs
- TLSH T153657D1267F98129F1F37B719EB992655A777CB0AD3AC10E23C1225E09B4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a1ad4830ffc609f3da3d5363131f1fef_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a1ad4830ffc609f3da3d5363131f1fef_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- SHA256 db50f0086bdff97c9c310431cbfa6d085e4547f05b4dbe83e867fee13efbc538
- MD5 a1ad4830ffc609f3da3d5363131f1fef
- SHA1 7d24aae1bb354b7ebbd84e623dc630f45f454375
- SHA512 e771c247bbe31d0a087d081e36b0e0bf259ac850d493c79ebe8a7217a20137a090f2ad8a10198858e7f685f851e0d85bf2e72edfd01fe35fb2347ea4a11fc16b
- SSDEEP 24576:ZcuzKPgsOStPUvgl+dPgA4A2notVQBU9OOyjaKSdzs:ZhKPgsOSt2gEd0ACIihOKSdzs
- TLSH T153657D1267F98129F1F37B719EB992655A777CB0AD3AC10E23C1225E09B4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1