General
- Target 2026-09-03_a2b0e7b267b12e1d1a760b744849d1e4_amadey_darkgate_elex_smoke-loader
- Size 85KB
- Sample260905-2b1bmstela
- SHA256 66f5b02291fcf99b4e2719381deaee31a5198058dd0701825e23665a07502691
- MD5 a2b0e7b267b12e1d1a760b744849d1e4
- SHA1 c0b5dd31ae5947673d67200f7f3c56145ad4f152
- SHA512 c87b0f3962eb97a2e1eb75c23daf89f39e6f630c4910e4bac16599546f766b802301ea7a19df3eaf4c60c07059c88f4f37c05d0204066437c1d9fb03cc7064a1
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiZ:wCCSUacxmurlg0v4iRZCpu
- TLSH T1B883292273A840F2E5711F3CC1B2A6D1066A7D517EF4F04B6E8471E95F732C0AAB6762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_a2b0e7b267b12e1d1a760b744849d1e4_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_a2b0e7b267b12e1d1a760b744849d1e4_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_a2b0e7b267b12e1d1a760b744849d1e4_amadey_darkgate_elex_smoke-loader
- Size 85KB
- SHA256 66f5b02291fcf99b4e2719381deaee31a5198058dd0701825e23665a07502691
- MD5 a2b0e7b267b12e1d1a760b744849d1e4
- SHA1 c0b5dd31ae5947673d67200f7f3c56145ad4f152
- SHA512 c87b0f3962eb97a2e1eb75c23daf89f39e6f630c4910e4bac16599546f766b802301ea7a19df3eaf4c60c07059c88f4f37c05d0204066437c1d9fb03cc7064a1
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTiZ:wCCSUacxmurlg0v4iRZCpu
- TLSH T1B883292273A840F2E5711F3CC1B2A6D1066A7D517EF4F04B6E8471E95F732C0AAB6762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.