General
- Target 2026-07-02_fb46fbf452e76fd00e51c1e7fee1297e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260702-tg2gwset5m
- SHA256 c7232570432b074aef6e38a5379e366db25729db367b790a2388463707504bde
- MD5 fb46fbf452e76fd00e51c1e7fee1297e
- SHA1 2b8f0a92dba289e121ebd0184093863beb867b40
- SHA512 4b62b304f20f47a07f9e50abc7e70a62d109761f0837fa7e646da24dd40b3d50d831c4b24970abd9afccef6c124add555568a83ca0c047cc5c37b156a127b0df
- SSDEEP 6144:XvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:XvzsVKZzGjSGecvX
- TLSH T197847C04BAA4F0B6D995043800DBAF36A67EB4281726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_fb46fbf452e76fd00e51c1e7fee1297e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-02_fb46fbf452e76fd00e51c1e7fee1297e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 c7232570432b074aef6e38a5379e366db25729db367b790a2388463707504bde
- MD5 fb46fbf452e76fd00e51c1e7fee1297e
- SHA1 2b8f0a92dba289e121ebd0184093863beb867b40
- SHA512 4b62b304f20f47a07f9e50abc7e70a62d109761f0837fa7e646da24dd40b3d50d831c4b24970abd9afccef6c124add555568a83ca0c047cc5c37b156a127b0df
- SSDEEP 6144:XvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:XvzsVKZzGjSGecvX
- TLSH T197847C04BAA4F0B6D995043800DBAF36A67EB4281726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE