General
- Target 2026-07-15_b5dd02c6bdc05bc2989ab2a6e2219503_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260715-cmermsct7t
- SHA256 01b84e26606f58510763e0b7101871db3a7d56dcd0fdd91e29abf69b3beb2530
- MD5 b5dd02c6bdc05bc2989ab2a6e2219503
- SHA1 57caf6fb577329eed7bf14e790da199d81f8cd52
- SHA512 67b562120bf80059662434959bd07cfb9b4be6793e7ff59f37c7e02776f2f3fffc4d786e029bf9b9fd869764b94d0825021adc86f8f43ac6843517710ae5ad32
- SSDEEP 3072:XViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:XViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T162847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_b5dd02c6bdc05bc2989ab2a6e2219503_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_b5dd02c6bdc05bc2989ab2a6e2219503_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 01b84e26606f58510763e0b7101871db3a7d56dcd0fdd91e29abf69b3beb2530
- MD5 b5dd02c6bdc05bc2989ab2a6e2219503
- SHA1 57caf6fb577329eed7bf14e790da199d81f8cd52
- SHA512 67b562120bf80059662434959bd07cfb9b4be6793e7ff59f37c7e02776f2f3fffc4d786e029bf9b9fd869764b94d0825021adc86f8f43ac6843517710ae5ad32
- SSDEEP 3072:XViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:XViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T162847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE