General
- Target 2026-10-22_30df33dbd3d232fad0cbc7cd56ee2606_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- Sample261024-v218asv1ft
- SHA256 1cef6a9201762533e3e3e3e561bc171b42b71cd94996e06f10a980026206b3bb
- MD5 30df33dbd3d232fad0cbc7cd56ee2606
- SHA1 f9560e72480769d055cf504c944b6e9fabc8e0c9
- SHA512 a1602bb769077887830d96bb3688735b3afeea5f25b070eb91efa19919a831b5d2e459a6ce7178913b43d30d590d8fa61e771c292bc0b46ea9db81ed5b13ad5a
- SSDEEP 49152:BNZCWOLT4g+GaDm5K2MtENFXypEU9NsShBxXy:vwnLTwGanMrUrnhBxXy
- TLSH T1F0957C1667F95128F1F33B71EEB9A2645A77BC71AD3AC50E6280015E0DB0E50DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_30df33dbd3d232fad0cbc7cd56ee2606_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_30df33dbd3d232fad0cbc7cd56ee2606_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_30df33dbd3d232fad0cbc7cd56ee2606_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- SHA256 1cef6a9201762533e3e3e3e561bc171b42b71cd94996e06f10a980026206b3bb
- MD5 30df33dbd3d232fad0cbc7cd56ee2606
- SHA1 f9560e72480769d055cf504c944b6e9fabc8e0c9
- SHA512 a1602bb769077887830d96bb3688735b3afeea5f25b070eb91efa19919a831b5d2e459a6ce7178913b43d30d590d8fa61e771c292bc0b46ea9db81ed5b13ad5a
- SSDEEP 49152:BNZCWOLT4g+GaDm5K2MtENFXypEU9NsShBxXy:vwnLTwGanMrUrnhBxXy
- TLSH T1F0957C1667F95128F1F33B71EEB9A2645A77BC71AD3AC50E6280015E0DB0E50DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory