General
- Target 2026-09-08_1688a375874b9700aaf87d6ea9beb7b8_amadey_darkgate_elex_smoke-loader
- Size 85KB
- Sample260910-h5yv5ahn5w
- SHA256 9f89adc094c3e46b049916626c82cd60dbcb95728fc5207c17b40ee775ef0b11
- MD5 1688a375874b9700aaf87d6ea9beb7b8
- SHA1 3aa0c7a28c1ba56c47c62d65052ff71ba7f6ac04
- SHA512 16ceb51179a082515442c73f51a38a39094b9a8c55fd5f6d6320223de9e8675186ad831003296d0d50501dfc8613b1d2267c6a2225d16659c15db0680b67d803
- SSDEEP 1536:XTSpXashU4lmtOfvzy7kUqzdg5SMwXRTWxkwTl8YTi7:eNasZlwOfAqzd/Cpo
- TLSH T12B83281272984072D1622F3CC1B2A6C24A6B7D517EF2F08B6F8835D95F732C0A6B6717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_1688a375874b9700aaf87d6ea9beb7b8_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_1688a375874b9700aaf87d6ea9beb7b8_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_1688a375874b9700aaf87d6ea9beb7b8_amadey_darkgate_elex_smoke-loader
- Size 85KB
- SHA256 9f89adc094c3e46b049916626c82cd60dbcb95728fc5207c17b40ee775ef0b11
- MD5 1688a375874b9700aaf87d6ea9beb7b8
- SHA1 3aa0c7a28c1ba56c47c62d65052ff71ba7f6ac04
- SHA512 16ceb51179a082515442c73f51a38a39094b9a8c55fd5f6d6320223de9e8675186ad831003296d0d50501dfc8613b1d2267c6a2225d16659c15db0680b67d803
- SSDEEP 1536:XTSpXashU4lmtOfvzy7kUqzdg5SMwXRTWxkwTl8YTi7:eNasZlwOfAqzd/Cpo
- TLSH T12B83281272984072D1622F3CC1B2A6C24A6B7D517EF2F08B6F8835D95F732C0A6B6717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.