General
- Target 2026-10-22_de82efe4adc2ad22deb2e926642e9d05_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- Sample261023-vdf78ae18n
- SHA256 cf9641c86b1067195d32671d11edac7ad6ed24914d1dc3be2614e7493629c80e
- MD5 de82efe4adc2ad22deb2e926642e9d05
- SHA1 f39a272a6b7b7708cd8e25e62ee882adf4bbd0f1
- SHA512 e256024d12a8e01f7a3d97032920f90ecf3de6f524e939b31dfb45b7016da67c87e7bd4cddc20c9c82b2775adb579227a5c243512615d156c462d57b65673430
- SSDEEP 49152:nNZCWOLT4g+GEDmdK2MtENzcvKEOAgJpT:NwnLTwGE3qYg7
- TLSH T10F957C1667F95128F1F33B71EEB992645A77BC71AE3AC50E6280025E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_de82efe4adc2ad22deb2e926642e9d05_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_de82efe4adc2ad22deb2e926642e9d05_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_de82efe4adc2ad22deb2e926642e9d05_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- SHA256 cf9641c86b1067195d32671d11edac7ad6ed24914d1dc3be2614e7493629c80e
- MD5 de82efe4adc2ad22deb2e926642e9d05
- SHA1 f39a272a6b7b7708cd8e25e62ee882adf4bbd0f1
- SHA512 e256024d12a8e01f7a3d97032920f90ecf3de6f524e939b31dfb45b7016da67c87e7bd4cddc20c9c82b2775adb579227a5c243512615d156c462d57b65673430
- SSDEEP 49152:nNZCWOLT4g+GEDmdK2MtENzcvKEOAgJpT:NwnLTwGE3qYg7
- TLSH T10F957C1667F95128F1F33B71EEB992645A77BC71AE3AC50E6280025E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory