General
- Target 2026-06-04_843598379dbce7c755252479423a745f_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260604-tfayjsaz8m
- SHA256 a7d7035fa64b1211d6ca38cce92ffcd73fbd0355e26e03eb3c180936fcde8e6b
- MD5 843598379dbce7c755252479423a745f
- SHA1 7d9a217117c7c586d770cb5e13d8d249f53ca00e
- SHA512 58fb3a7681331d2bc1fb1114843e0d94c2dbda5f5c078552d17bf2b5402cc8b71b75e492f6e30d80c18f998f71d26221d55455a98dc3140e39868be57f2cc433
- SSDEEP 3072:SFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:SFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1F1847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-04_843598379dbce7c755252479423a745f_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-06-04_843598379dbce7c755252479423a745f_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 a7d7035fa64b1211d6ca38cce92ffcd73fbd0355e26e03eb3c180936fcde8e6b
- MD5 843598379dbce7c755252479423a745f
- SHA1 7d9a217117c7c586d770cb5e13d8d249f53ca00e
- SHA512 58fb3a7681331d2bc1fb1114843e0d94c2dbda5f5c078552d17bf2b5402cc8b71b75e492f6e30d80c18f998f71d26221d55455a98dc3140e39868be57f2cc433
- SSDEEP 3072:SFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:SFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1F1847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE