General
- Target 2026-11-11_2bf80890b5b418c330b9ef54911d4841_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- Sample261113-shrteacz3s
- SHA256 3dd4fde3449c7cd10ee4f64f552deafde87a12868ec0617fcc7084a5d8860e17
- MD5 2bf80890b5b418c330b9ef54911d4841
- SHA1 a26e146bdfff042fd5d8efe1dc72fc63d1637f1a
- SHA512 4cd3c1fe6b340677b0a77af066fd05819218cec9db03e360aa109c480cbb8b217bd99e4c17d1081fdec4055468fb66819cc490512db293280511812a7906d480
- SSDEEP 24576:nbdrZe4aWOLT4nrGPtTmsK2MtENGH3fzq9bPykSzmCi4vGm:nNZCWOLT4nrGPBmsK2MtENS3oyW4e
- TLSH T129956B1667F95128F1F32B71EEB993645A77BC71AE3AC50E6280015E0DB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_2bf80890b5b418c330b9ef54911d4841_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_2bf80890b5b418c330b9ef54911d4841_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_2bf80890b5b418c330b9ef54911d4841_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
- Size 1.9MB
- SHA256 3dd4fde3449c7cd10ee4f64f552deafde87a12868ec0617fcc7084a5d8860e17
- MD5 2bf80890b5b418c330b9ef54911d4841
- SHA1 a26e146bdfff042fd5d8efe1dc72fc63d1637f1a
- SHA512 4cd3c1fe6b340677b0a77af066fd05819218cec9db03e360aa109c480cbb8b217bd99e4c17d1081fdec4055468fb66819cc490512db293280511812a7906d480
- SSDEEP 24576:nbdrZe4aWOLT4nrGPtTmsK2MtENGH3fzq9bPykSzmCi4vGm:nNZCWOLT4nrGPBmsK2MtENS3oyW4e
- TLSH T129956B1667F95128F1F32B71EEB993645A77BC71AE3AC50E6280015E0DB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled
Drops file in System32 directory