General
- Target 2026-09-12_7eb9fde5d2bdc490699d01e720425c21_amadey_darkgate_elex_redline-stealer_smoke-loader_stealc
- Size 25.5MB
- Sample260912-2qrcaawhmf
- SHA256 68d6817dc1e20b5a684c81a6c10290b7dc5d67cfe5bf4afa0fd7d4cdbf07f25d
- MD5 7eb9fde5d2bdc490699d01e720425c21
- SHA1 dfa0d844eb9b2727e9f2c234990ba20ccf8b8c41
- SHA512 94f1f26ae7bcaaef0c2a9b43c55f2738db9a742ab5f65d0f4c2364b88596fe76e67fe572a386abae8a73a3864bf64ce64acc9f46aff0742f46b0650bb6799df3
- SSDEEP 786432:ytpZpn8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpvTuPKJBZlC39ORb
- TLSH T15E4733317AA29071D772363496996339F77EAD70AB3802D322903D3C7E716C25A7C25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-12_7eb9fde5d2bdc490699d01e720425c21_amadey_darkgate_elex_redline-stealer_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_7eb9fde5d2bdc490699d01e720425c21_amadey_darkgate_elex_redline-stealer_smoke-loader_stealc
- Size 25.5MB
- SHA256 68d6817dc1e20b5a684c81a6c10290b7dc5d67cfe5bf4afa0fd7d4cdbf07f25d
- MD5 7eb9fde5d2bdc490699d01e720425c21
- SHA1 dfa0d844eb9b2727e9f2c234990ba20ccf8b8c41
- SHA512 94f1f26ae7bcaaef0c2a9b43c55f2738db9a742ab5f65d0f4c2364b88596fe76e67fe572a386abae8a73a3864bf64ce64acc9f46aff0742f46b0650bb6799df3
- SSDEEP 786432:ytpZpn8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpvTuPKJBZlC39ORb
- TLSH T15E4733317AA29071D772363496996339F77EAD70AB3802D322903D3C7E716C25A7C25B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL