General
- Target 2026-08-24_a108ddd3674727d869159d8a6136f7d8_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260825-ggte3aga37
- SHA256 a9fbc28a6616bf7c19e864c1e61c9b2e53d6479c06b4cd76eab755ea5e3e002d
- MD5 a108ddd3674727d869159d8a6136f7d8
- SHA1 d450f02a2a396dd3dab343605b7d1951e8fbf7a6
- SHA512 9bb230f169db95d7700fec78624a9ccab5bc834897b6cc8f747b7c3dcff7faef2bd57997d37ce3e5bba63d01178e34c0129de7f010fd1f9192f50a0cdf029379
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiwA:wCCSUacxmurlg0v4iRZCp6
- TLSH T10E93272163E840B2E2765F3CC1B2A2D1062A7D527EF1F14F6D8475D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_a108ddd3674727d869159d8a6136f7d8_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_a108ddd3674727d869159d8a6136f7d8_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_a108ddd3674727d869159d8a6136f7d8_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 a9fbc28a6616bf7c19e864c1e61c9b2e53d6479c06b4cd76eab755ea5e3e002d
- MD5 a108ddd3674727d869159d8a6136f7d8
- SHA1 d450f02a2a396dd3dab343605b7d1951e8fbf7a6
- SHA512 9bb230f169db95d7700fec78624a9ccab5bc834897b6cc8f747b7c3dcff7faef2bd57997d37ce3e5bba63d01178e34c0129de7f010fd1f9192f50a0cdf029379
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiwA:wCCSUacxmurlg0v4iRZCp6
- TLSH T10E93272163E840B2E2765F3CC1B2A2D1062A7D527EF1F14F6D8475D94F736C0AAB1B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.