General
- Target 2026-11-01_f4bb701801bfe7bfe3a3e9e1f52aaf90_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- Sample261102-dj1elsev9y
- SHA256 9dbb46095fbc579166d9b3e6ce9a80e9f5403550fb3386d3bf9837331ccd9706
- MD5 f4bb701801bfe7bfe3a3e9e1f52aaf90
- SHA1 455ccc34c03dba026cfc7f231a829de5f98d16b8
- SHA512 595a47b797c87782bc690ade34d8ce6c7cbf2dea0328dfef1f7f21672d6bbc9cac58b400ebd587e021c0a7c1a7baa6c608df2de3e39359ef912c658b53384001
- SSDEEP 49152:BNZCWOLT4JvGCpm6K2MtENv0G11k/GYOW:vwnLTqGCEIbk/GYl
- TLSH T1F1957B1267E94129F1F33B71EEB993645A77BC71AE3AC50E6280125E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_f4bb701801bfe7bfe3a3e9e1f52aaf90_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_f4bb701801bfe7bfe3a3e9e1f52aaf90_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_f4bb701801bfe7bfe3a3e9e1f52aaf90_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- SHA256 9dbb46095fbc579166d9b3e6ce9a80e9f5403550fb3386d3bf9837331ccd9706
- MD5 f4bb701801bfe7bfe3a3e9e1f52aaf90
- SHA1 455ccc34c03dba026cfc7f231a829de5f98d16b8
- SHA512 595a47b797c87782bc690ade34d8ce6c7cbf2dea0328dfef1f7f21672d6bbc9cac58b400ebd587e021c0a7c1a7baa6c608df2de3e39359ef912c658b53384001
- SSDEEP 49152:BNZCWOLT4JvGCpm6K2MtENv0G11k/GYOW:vwnLTqGCEIbk/GYl
- TLSH T1F1957B1267E94129F1F33B71EEB993645A77BC71AE3AC50E6280125E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory