General
- Target 2026-06-29_06ac17698fb0f568a04be7313522e8ca_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260630-qnjc4sf14l
- SHA256 68a8ea6675af2380418fb086e5b25a60e85be2c9a72d16e42aba96ab6b0dc4f9
- MD5 06ac17698fb0f568a04be7313522e8ca
- SHA1 42dc02b1079c6827b4df41de9c81a07acf2186d1
- SHA512 5334a977eed126b211b2a7f7f449bcb884e578b01b79dd781b3f207ab2f13a37c1434c1fa1e7da393d9f5f4517390b6d7c85700d28bf10192aace6b0fe6f2416
- SSDEEP 3072:JViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:JViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T188847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-29_06ac17698fb0f568a04be7313522e8ca_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-06-29_06ac17698fb0f568a04be7313522e8ca_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 68a8ea6675af2380418fb086e5b25a60e85be2c9a72d16e42aba96ab6b0dc4f9
- MD5 06ac17698fb0f568a04be7313522e8ca
- SHA1 42dc02b1079c6827b4df41de9c81a07acf2186d1
- SHA512 5334a977eed126b211b2a7f7f449bcb884e578b01b79dd781b3f207ab2f13a37c1434c1fa1e7da393d9f5f4517390b6d7c85700d28bf10192aace6b0fe6f2416
- SSDEEP 3072:JViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:JViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T188847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE