General
- Target 2026-07-13_5d83ebdb3f36c83f44ccb3af626e6a1f_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260713-2a7dkaby9w
- SHA256 a95eed9aaa4d445f603f42a9a6dfb8ac85195653bcf9f8ae2409c3519d0ec00e
- MD5 5d83ebdb3f36c83f44ccb3af626e6a1f
- SHA1 9629904b07a9f793145bc9418f73bb9eb057048b
- SHA512 1c53b2abd5dc0aa1d5c6a4499f390076dc669b2ab4bda35a1feba37f93bf013130152009d825e49cd39d19c53a495c29adba9c3720bec1a7ba726d480d820e18
- SSDEEP 3072:2ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:2ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C9847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-13_5d83ebdb3f36c83f44ccb3af626e6a1f_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-13_5d83ebdb3f36c83f44ccb3af626e6a1f_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 a95eed9aaa4d445f603f42a9a6dfb8ac85195653bcf9f8ae2409c3519d0ec00e
- MD5 5d83ebdb3f36c83f44ccb3af626e6a1f
- SHA1 9629904b07a9f793145bc9418f73bb9eb057048b
- SHA512 1c53b2abd5dc0aa1d5c6a4499f390076dc669b2ab4bda35a1feba37f93bf013130152009d825e49cd39d19c53a495c29adba9c3720bec1a7ba726d480d820e18
- SSDEEP 3072:2ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:2ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C9847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE