General
- Target 2026-09-07_1cf54c708a15dd2b6619b02b2b3c6142_amadey_darkgate_elex_smoke-loader
- Size 85KB
- Sample260909-gr8yhasvev
- SHA256 fa83073215a19bf00130a4f3f4b454954128d08fac0753da42076208c88ef81d
- MD5 1cf54c708a15dd2b6619b02b2b3c6142
- SHA1 6a2341025abbb576242f0bcbf0c1c55ecaa8252a
- SHA512 2b993d3f9ceb1e4ee4f8287a84cf81b1c8f4c2416fd406d391cc7515d23ee07a6929cf0316914d177e82f6a42da73475336992363d4c771ca0faf3cb7e38f41c
- SSDEEP 1536:XTSpXashU4lmtOfvzy7kUqzdg5SMwXRTWxkwTl8YTi+:eNasZlwOfAqzd/CpJ
- TLSH T12983281272984072D1622F3CD1B2A6C24A6B7D517EF2F08B6F8835D95F732C0A6B6717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_1cf54c708a15dd2b6619b02b2b3c6142_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_1cf54c708a15dd2b6619b02b2b3c6142_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_1cf54c708a15dd2b6619b02b2b3c6142_amadey_darkgate_elex_smoke-loader
- Size 85KB
- SHA256 fa83073215a19bf00130a4f3f4b454954128d08fac0753da42076208c88ef81d
- MD5 1cf54c708a15dd2b6619b02b2b3c6142
- SHA1 6a2341025abbb576242f0bcbf0c1c55ecaa8252a
- SHA512 2b993d3f9ceb1e4ee4f8287a84cf81b1c8f4c2416fd406d391cc7515d23ee07a6929cf0316914d177e82f6a42da73475336992363d4c771ca0faf3cb7e38f41c
- SSDEEP 1536:XTSpXashU4lmtOfvzy7kUqzdg5SMwXRTWxkwTl8YTi+:eNasZlwOfAqzd/CpJ
- TLSH T12983281272984072D1622F3CD1B2A6C24A6B7D517EF2F08B6F8835D95F732C0A6B6717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.