General
- Target 2026-07-14_2776aab8e8b6965ad25ceab9354c3491_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260714-qea1dags7t
- SHA256 c2e4961702dff7328b3ab8654bb71f333b995408161166455f972499450e4767
- MD5 2776aab8e8b6965ad25ceab9354c3491
- SHA1 b1890ef4d6d12a8a07e76d8c775de4b742b160dd
- SHA512 0c78d78f300726502a0f65a1b31a9abb258a3a6103c4bc3551133ae527432045d06af1ac0424675ac976100bd5239f1204692892e639be8dcf4a9e38fff862c1
- SSDEEP 3072:xViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:xViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C0847C04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_2776aab8e8b6965ad25ceab9354c3491_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-14_2776aab8e8b6965ad25ceab9354c3491_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 c2e4961702dff7328b3ab8654bb71f333b995408161166455f972499450e4767
- MD5 2776aab8e8b6965ad25ceab9354c3491
- SHA1 b1890ef4d6d12a8a07e76d8c775de4b742b160dd
- SHA512 0c78d78f300726502a0f65a1b31a9abb258a3a6103c4bc3551133ae527432045d06af1ac0424675ac976100bd5239f1204692892e639be8dcf4a9e38fff862c1
- SSDEEP 3072:xViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:xViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C0847C04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE