General
- Target 2026-08-24_a38fd9bf2abe4387ac75687dc167c28b_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260825-f7gnhsxblh
- SHA256 61eaec35f774181c6cd65c856a0874ed4562d2b5144911c75d99246311f66b77
- MD5 a38fd9bf2abe4387ac75687dc167c28b
- SHA1 2a7b06b6142bc295ad52a60328b548674c15d9c5
- SHA512 499fd2b0539125dbb122cb0d24385cf8c84c3ca3f82dacc16d40419ccbe7341366710d88c5fdc2fed97df1e3148f161965e44a1c4a014cfaf7c05c302c34e8e2
- SSDEEP 49152:WiT+0oUcTFWAyRU+MSgouvAeFfenxyQZXS7uQ0NIq:Bxg8aS1uxaxdS7u9
- TLSH T16F955A0367F84129F9F37B75DABA83605A777CE19D3EC64E5280160E0CB0A909A76377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_a38fd9bf2abe4387ac75687dc167c28b_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_a38fd9bf2abe4387ac75687dc167c28b_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_a38fd9bf2abe4387ac75687dc167c28b_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 61eaec35f774181c6cd65c856a0874ed4562d2b5144911c75d99246311f66b77
- MD5 a38fd9bf2abe4387ac75687dc167c28b
- SHA1 2a7b06b6142bc295ad52a60328b548674c15d9c5
- SHA512 499fd2b0539125dbb122cb0d24385cf8c84c3ca3f82dacc16d40419ccbe7341366710d88c5fdc2fed97df1e3148f161965e44a1c4a014cfaf7c05c302c34e8e2
- SSDEEP 49152:WiT+0oUcTFWAyRU+MSgouvAeFfenxyQZXS7uQ0NIq:Bxg8aS1uxaxdS7u9
- TLSH T16F955A0367F84129F9F37B75DABA83605A777CE19D3EC64E5280160E0CB0A909A76377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1