General
- Target 2026-07-15_3794413f5ec7f3398c856f2cfe5a65a8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260715-j5trvaft9j
- SHA256 41f84f6800789493ef78dbe9ed2d3866faa74cec52dd9e3c278dfa8655e4ca05
- MD5 3794413f5ec7f3398c856f2cfe5a65a8
- SHA1 0afb07c3389230457bdee33d919dca5131626d50
- SHA512 77948e5b3effd0ec87595d5f9fa9563459585a0a7748ba16a9298e56901a807d043f406da84244a970ccd89b449899951865888fbcc7639fb7353f325d141c40
- SSDEEP 3072:jViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:jViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T185847C04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_3794413f5ec7f3398c856f2cfe5a65a8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_3794413f5ec7f3398c856f2cfe5a65a8_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 41f84f6800789493ef78dbe9ed2d3866faa74cec52dd9e3c278dfa8655e4ca05
- MD5 3794413f5ec7f3398c856f2cfe5a65a8
- SHA1 0afb07c3389230457bdee33d919dca5131626d50
- SHA512 77948e5b3effd0ec87595d5f9fa9563459585a0a7748ba16a9298e56901a807d043f406da84244a970ccd89b449899951865888fbcc7639fb7353f325d141c40
- SSDEEP 3072:jViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:jViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T185847C04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE