General
- Target 2026-09-29_19b1f3cf42326f310bead5e12a2b7bd9_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 2.8MB
- Sample260930-fj83vsfa79
- SHA256 932c86f01df9bebc9088112f6df15855df57d2715b295e86ae6d435fa12e5b0e
- MD5 19b1f3cf42326f310bead5e12a2b7bd9
- SHA1 22c53b264d495ab73c64f69ed692ae671c747aef
- SHA512 0504c96f7b5de9d74aeb59efeb9fabeebb0bf7f97ab465a907fac3f45a57bd2cafff864578522443c687fac8ec2962e4d591214666a40176024eae38243190e9
- SSDEEP 49152:crxRP9sg+B/V2j+J6hxSMmT8oWgBCaXLarSj8RoTCCQhxSMmT8oWgBCaX:c3MBV2V+M4FHXLJTU+M4FHX
- TLSH T136D5CF1277F99129F1F37B71EEB883645A77BCB5AD39C50E6280215E09B4A40DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_19b1f3cf42326f310bead5e12a2b7bd9_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_19b1f3cf42326f310bead5e12a2b7bd9_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 2.8MB
- SHA256 932c86f01df9bebc9088112f6df15855df57d2715b295e86ae6d435fa12e5b0e
- MD5 19b1f3cf42326f310bead5e12a2b7bd9
- SHA1 22c53b264d495ab73c64f69ed692ae671c747aef
- SHA512 0504c96f7b5de9d74aeb59efeb9fabeebb0bf7f97ab465a907fac3f45a57bd2cafff864578522443c687fac8ec2962e4d591214666a40176024eae38243190e9
- SSDEEP 49152:crxRP9sg+B/V2j+J6hxSMmT8oWgBCaXLarSj8RoTCCQhxSMmT8oWgBCaX:c3MBV2V+M4FHXLJTU+M4FHX
- TLSH T136D5CF1277F99129F1F37B71EEB883645A77BCB5AD39C50E6280215E09B4A40DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1