General
- Target 2026-09-08_e56c980a26d14a0376d51a0ea4157825_amadey_darkgate_elex_smoke-loader
- Size 86KB
- Sample260910-chzk9atdkg
- SHA256 9dfa6e86efd74cbe45fa299706afa2949f2b5c32d77d0a3e76e63615ba6bb4d7
- MD5 e56c980a26d14a0376d51a0ea4157825
- SHA1 318e9973808e7979aef8588d7f5e1dc478e8dd01
- SHA512 7eef0d10c1e0a3c1a4413d176ff64616baaca8f5ae234b748e3ab93505404afec878544e626f1142d26617dbadcce027d650f73c7f4090c595431eaf59242c35
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTii:wCCSUacxmurlg0v4iRZCp9
- TLSH T136833922739840F2E5721F3CC1B2A6D1066A7D517EF0F14B6E8431E95F732C0AAB5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_e56c980a26d14a0376d51a0ea4157825_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_e56c980a26d14a0376d51a0ea4157825_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_e56c980a26d14a0376d51a0ea4157825_amadey_darkgate_elex_smoke-loader
- Size 86KB
- SHA256 9dfa6e86efd74cbe45fa299706afa2949f2b5c32d77d0a3e76e63615ba6bb4d7
- MD5 e56c980a26d14a0376d51a0ea4157825
- SHA1 318e9973808e7979aef8588d7f5e1dc478e8dd01
- SHA512 7eef0d10c1e0a3c1a4413d176ff64616baaca8f5ae234b748e3ab93505404afec878544e626f1142d26617dbadcce027d650f73c7f4090c595431eaf59242c35
- SSDEEP 1536:dToccCCSUacxmuhUOl210vjjODk0iRu5SMwXRTWxkwTl8YTii:wCCSUacxmurlg0v4iRZCp9
- TLSH T136833922739840F2E5721F3CC1B2A6D1066A7D517EF0F14B6E8431E95F732C0AAB5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.