General
- Target 2026-10-17_c60767178b2f2ce5ee59068627f4ad88_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.7MB
- Sample261018-yefvmass9j
- SHA256 c1de7a4dd2d4a4ee177d516157f6c1fb75ecadcaee161a791ae317616af92a87
- MD5 c60767178b2f2ce5ee59068627f4ad88
- SHA1 9507ba52814d4add65fc75e17cb1963981f5aaba
- SHA512 24a60dacbce8289a978bd855cd6214b4e55fe53ddff2cb4f48ad73ed89a1917b344e4673b69a834041e9da50a9d0ff9e1d2abf7e2d8d78b338d302178954d481
- SSDEEP 49152:oqGMLdJbsbxTR/8QhwKpra9+JLMvjWMGeGxwWwRn:smJox1/8QhwKlawF1MGet
- TLSH T1E4858E1137D18076D2773A70996A93F9A6BABC708D75864F11903F3D2E30952AB3C72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-17_c60767178b2f2ce5ee59068627f4ad88_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-10-17_c60767178b2f2ce5ee59068627f4ad88_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target 2026-10-17_c60767178b2f2ce5ee59068627f4ad88_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.7MB
- SHA256 c1de7a4dd2d4a4ee177d516157f6c1fb75ecadcaee161a791ae317616af92a87
- MD5 c60767178b2f2ce5ee59068627f4ad88
- SHA1 9507ba52814d4add65fc75e17cb1963981f5aaba
- SHA512 24a60dacbce8289a978bd855cd6214b4e55fe53ddff2cb4f48ad73ed89a1917b344e4673b69a834041e9da50a9d0ff9e1d2abf7e2d8d78b338d302178954d481
- SSDEEP 49152:oqGMLdJbsbxTR/8QhwKpra9+JLMvjWMGeGxwWwRn:smJox1/8QhwKlawF1MGet
- TLSH T1E4858E1137D18076D2773A70996A93F9A6BABC708D75864F11903F3D2E30952AB3C72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Stops running service(s)
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1