General
- Target 2026-08-27_fd05c84f62a6ba70d8337fa7b1cfcb0b_amadey_darkgate_elex_smoke-loader
- Size 88KB
- Sample260828-ahb4vabd29
- SHA256 a58029ecc72781af29c3eea1d0d6e587ec41390bda0a8d621361281ea86099be
- MD5 fd05c84f62a6ba70d8337fa7b1cfcb0b
- SHA1 7cf5910dfd0ea2e8f687bac316476118e6d2101b
- SHA512 5b8ae1febdfa438c6a347b94098809df879652aadca52d40462d4a02570324904249ca75985d102c2c7f6c3e60996ff7f71e7298b7ff83ea07fa372fa2dae614
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTit:wCCSUacxmurlg0v4iRZCpy
- TLSH T1EB93282163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_fd05c84f62a6ba70d8337fa7b1cfcb0b_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_fd05c84f62a6ba70d8337fa7b1cfcb0b_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_fd05c84f62a6ba70d8337fa7b1cfcb0b_amadey_darkgate_elex_smoke-loader
- Size 88KB
- SHA256 a58029ecc72781af29c3eea1d0d6e587ec41390bda0a8d621361281ea86099be
- MD5 fd05c84f62a6ba70d8337fa7b1cfcb0b
- SHA1 7cf5910dfd0ea2e8f687bac316476118e6d2101b
- SHA512 5b8ae1febdfa438c6a347b94098809df879652aadca52d40462d4a02570324904249ca75985d102c2c7f6c3e60996ff7f71e7298b7ff83ea07fa372fa2dae614
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTit:wCCSUacxmurlg0v4iRZCpy
- TLSH T1EB93282163E840B2E2765F3CC1B2A6D1062A7D527EF1F14F6D8471D94F736C0AAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.