General
- Target 2026-07-06_2f80233bdfeaf9e000037471497ada53_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260706-13ch8acv4z
- SHA256 4b80ed031f831db07e87caf497ce938e9f79830f0469b919b72a711227edce50
- MD5 2f80233bdfeaf9e000037471497ada53
- SHA1 a676d1db82d8e36d037a8fd45ec70a2eb689e253
- SHA512 67b84366221d45858d6acd563afb1a0a0ec4ce35b41b2448ba5d12f07f673ec3cdd0a87f9c76883faa2d6eb7f43eeb0a2be2720e5f1cf07d869e992fd37f51f9
- SSDEEP 3072:fT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:r6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T108847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_2f80233bdfeaf9e000037471497ada53_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-06_2f80233bdfeaf9e000037471497ada53_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 4b80ed031f831db07e87caf497ce938e9f79830f0469b919b72a711227edce50
- MD5 2f80233bdfeaf9e000037471497ada53
- SHA1 a676d1db82d8e36d037a8fd45ec70a2eb689e253
- SHA512 67b84366221d45858d6acd563afb1a0a0ec4ce35b41b2448ba5d12f07f673ec3cdd0a87f9c76883faa2d6eb7f43eeb0a2be2720e5f1cf07d869e992fd37f51f9
- SSDEEP 3072:fT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:r6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T108847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE