General
- Target 2026-11-10_e1e73e2927b78dc85172b95f5a883aae_darkgate_elex_smoke-loader
- Size 2.1MB
- Sample261111-vytdaaas4j
- SHA256 e67f0356caa1cc84cd298c74231fc368fba1d64858c7410a5c6c0b119b5a8b48
- MD5 e1e73e2927b78dc85172b95f5a883aae
- SHA1 12535e299b0ee55b595350b783009f1870e4302b
- SHA512 2ca88169a205c536971d9ca6196d9aaa19f4d145b838510eb38b86e299377f8a322342ca4da79b90bf7d38e85f67a90c3993e950a137eecf00c55f586c5199f3
- SSDEEP 49152:3MDWLKW0qmkeX5Kz8FiM6JHCIgIV5XOCOe/78DGx5V1uCRkzWL8rl87Bxk7e6kH:QK0qmfXQaZ6JHCIgIV5XONe6Gx5TuCRb
- TLSH T153A5BE7D76A08076D67233B0464EE3F9F2ADAD314935064B76A13E397A304A34D2D26F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-10_e1e73e2927b78dc85172b95f5a883aae_darkgate_elex_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_e1e73e2927b78dc85172b95f5a883aae_darkgate_elex_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.208
-
112.175.88.207
Targets
-
- Target 2026-11-10_e1e73e2927b78dc85172b95f5a883aae_darkgate_elex_smoke-loader
- Size 2.1MB
- SHA256 e67f0356caa1cc84cd298c74231fc368fba1d64858c7410a5c6c0b119b5a8b48
- MD5 e1e73e2927b78dc85172b95f5a883aae
- SHA1 12535e299b0ee55b595350b783009f1870e4302b
- SHA512 2ca88169a205c536971d9ca6196d9aaa19f4d145b838510eb38b86e299377f8a322342ca4da79b90bf7d38e85f67a90c3993e950a137eecf00c55f586c5199f3
- SSDEEP 49152:3MDWLKW0qmkeX5Kz8FiM6JHCIgIV5XOCOe/78DGx5V1uCRkzWL8rl87Bxk7e6kH:QK0qmfXQaZ6JHCIgIV5XONe6Gx5TuCRb
- TLSH T153A5BE7D76A08076D67233B0464EE3F9F2ADAD314935064B76A13E397A304A34D2D26F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE