General
- Target 2026-07-10_d6cb3d5f9e546a1a79b81e7c78307ba2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260710-x2kawsfv9j
- SHA256 a2c634f3f047009559852bfdb186cd8dfbe51eb5c44b80aebb867d85a16f0d0c
- MD5 d6cb3d5f9e546a1a79b81e7c78307ba2
- SHA1 94795e78e8ec27c946ed17e77f2894784501e1eb
- SHA512 162fec76c97ed38874c5dae06a5ebc6c125a90d7d748cc0a98e9a362362892a393a19aefa5585d85cf2d1e8be0d26b8a58c4012a78bf57f8abd30c94f0a3dd89
- SSDEEP 3072:7FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:7FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T167847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_d6cb3d5f9e546a1a79b81e7c78307ba2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-10_d6cb3d5f9e546a1a79b81e7c78307ba2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 a2c634f3f047009559852bfdb186cd8dfbe51eb5c44b80aebb867d85a16f0d0c
- MD5 d6cb3d5f9e546a1a79b81e7c78307ba2
- SHA1 94795e78e8ec27c946ed17e77f2894784501e1eb
- SHA512 162fec76c97ed38874c5dae06a5ebc6c125a90d7d748cc0a98e9a362362892a393a19aefa5585d85cf2d1e8be0d26b8a58c4012a78bf57f8abd30c94f0a3dd89
- SSDEEP 3072:7FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:7FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T167847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE