General
- Target 2026-07-09_dd62c9b1a150f029f1602f7ede7219cc_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260709-try5hsd191
- SHA256 760af4dc26a6f780a21f9b39a1168592fa6dc5d37a36df8a8fa21324ebea71af
- MD5 dd62c9b1a150f029f1602f7ede7219cc
- SHA1 bff49be279af87afa28e5e29a1829bc5f212ff96
- SHA512 acd8d646ad8a1f7bbfba6a5c91ec3216f07c3428a3e88859256e025dc9ec7aa40c06c9069f92cbc028a85ac89e5b67bef91a7a5873134bd65fe95445e6e5f54c
- SSDEEP 3072:StFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLo:8FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T17A847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_dd62c9b1a150f029f1602f7ede7219cc_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-09_dd62c9b1a150f029f1602f7ede7219cc_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 760af4dc26a6f780a21f9b39a1168592fa6dc5d37a36df8a8fa21324ebea71af
- MD5 dd62c9b1a150f029f1602f7ede7219cc
- SHA1 bff49be279af87afa28e5e29a1829bc5f212ff96
- SHA512 acd8d646ad8a1f7bbfba6a5c91ec3216f07c3428a3e88859256e025dc9ec7aa40c06c9069f92cbc028a85ac89e5b67bef91a7a5873134bd65fe95445e6e5f54c
- SSDEEP 3072:StFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLo:8FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T17A847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE