General
- Target 2026-07-05_6f0fbf08ee782e97a5b4519fd2438356_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260705-tkga5adx3w
- SHA256 7c454536460e442d1d14b65f4078f35344949884008e9a3fabb3d02060484e86
- MD5 6f0fbf08ee782e97a5b4519fd2438356
- SHA1 7720e0b1f65ff734f25383422b020d96ba069dbe
- SHA512 c80175dd367ab5eb59f55cd0a0df76f37eb6fcf979cd4cb341820d297222faefab7d13cd519d645c4a2e643a4489b2d0e54ceda94ea39f13191207c163de3966
- SSDEEP 3072:TT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:P6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T101847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_6f0fbf08ee782e97a5b4519fd2438356_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-05_6f0fbf08ee782e97a5b4519fd2438356_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 7c454536460e442d1d14b65f4078f35344949884008e9a3fabb3d02060484e86
- MD5 6f0fbf08ee782e97a5b4519fd2438356
- SHA1 7720e0b1f65ff734f25383422b020d96ba069dbe
- SHA512 c80175dd367ab5eb59f55cd0a0df76f37eb6fcf979cd4cb341820d297222faefab7d13cd519d645c4a2e643a4489b2d0e54ceda94ea39f13191207c163de3966
- SSDEEP 3072:TT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:P6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T101847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE