General
- Target 2026-09-12_3ef251eacbd3453e27b333a75cd9df09_amadey_darkgate_elex_smoke-loader_stealc_stop
- Size 572KB
- Sample260913-dmtq8ssyd1
- SHA256 8aaaaacdff46a539713ba589146277c51cb6788fa46cef5e1cfc3a7c8e63636f
- MD5 3ef251eacbd3453e27b333a75cd9df09
- SHA1 278df1035ed3b363311ffefbcd0c6ecf023f97ab
- SHA512 685e1d45ce69754726028ccd42f69d07bbb759f66d08a4f8a087cd39d9d0feb0716a519b19a5088c0d1d740f636d2b3c74d5ac0d19b37c22e7877ef8739a15d6
- SSDEEP 6144:XUZyq345fdVlWOYMx24lkmYL32BJP3gb7KvUbR1y9mH:5mOYMrlkmYz2B0VH
- TLSH T1ACC418013290CF36D16F2472C9AAC6F4566B7D20CF1593CB72C57E2EBA716D2A93121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_3ef251eacbd3453e27b333a75cd9df09_amadey_darkgate_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_3ef251eacbd3453e27b333a75cd9df09_amadey_darkgate_elex_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_3ef251eacbd3453e27b333a75cd9df09_amadey_darkgate_elex_smoke-loader_stealc_stop
- Size 572KB
- SHA256 8aaaaacdff46a539713ba589146277c51cb6788fa46cef5e1cfc3a7c8e63636f
- MD5 3ef251eacbd3453e27b333a75cd9df09
- SHA1 278df1035ed3b363311ffefbcd0c6ecf023f97ab
- SHA512 685e1d45ce69754726028ccd42f69d07bbb759f66d08a4f8a087cd39d9d0feb0716a519b19a5088c0d1d740f636d2b3c74d5ac0d19b37c22e7877ef8739a15d6
- SSDEEP 6144:XUZyq345fdVlWOYMx24lkmYL32BJP3gb7KvUbR1y9mH:5mOYMrlkmYz2B0VH
- TLSH T1ACC418013290CF36D16F2472C9AAC6F4566B7D20CF1593CB72C57E2EBA716D2A93121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application