General
- Target 2026-10-22_6ec29e7684c19335257d042d40c393f4_amadey_darkgate_elex_smoke-loader
- Size 37.9MB
- Sample261024-k9df4attdv
- SHA256 26643404491312f08ad47aa5cabf5cca1837f495b0c906b3bbada36ffa19532e
- MD5 6ec29e7684c19335257d042d40c393f4
- SHA1 5f1f2a514076b3b0dcf5036908a759eb0305498a
- SHA512 2b378d2637714dcd8121d02b619f9a6d869f96e802777385625b19d0d6d12823b1e767c48444fd03bac5ae4ccd5e52d10cf91d100520cc1df95f03f04e06b374
- SSDEEP 393216:YtHU4O9NuYEpP8loEC3rGVkKjz76930lSEs28EKcnvrOVDLAsdhvRLXNkFraqOFQ:L4O9FT+3rY7cUSEmcnHsdL9kh2hQ8Q
- TLSH T12C9702A0699BF460B31D8911D0EB9FF1B3CF3337BB0E61865C1929C1062A556DD32E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_6ec29e7684c19335257d042d40c393f4_amadey_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_6ec29e7684c19335257d042d40c393f4_amadey_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6ec29e7684c19335257d042d40c393f4_amadey_darkgate_elex_smoke-loader
- Size 37.9MB
- SHA256 26643404491312f08ad47aa5cabf5cca1837f495b0c906b3bbada36ffa19532e
- MD5 6ec29e7684c19335257d042d40c393f4
- SHA1 5f1f2a514076b3b0dcf5036908a759eb0305498a
- SHA512 2b378d2637714dcd8121d02b619f9a6d869f96e802777385625b19d0d6d12823b1e767c48444fd03bac5ae4ccd5e52d10cf91d100520cc1df95f03f04e06b374
- SSDEEP 393216:YtHU4O9NuYEpP8loEC3rGVkKjz76930lSEs28EKcnvrOVDLAsdhvRLXNkFraqOFQ:L4O9FT+3rY7cUSEmcnHsdL9kh2hQ8Q
- TLSH T12C9702A0699BF460B31D8911D0EB9FF1B3CF3337BB0E61865C1929C1062A556DD32E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.