General
- Target 2026-07-15_f09ec346ae97aaf8c4d6fad34d339281_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260715-twvb5abz5v
- SHA256 7fc6c871b2b69b17d4de087e91da90ac40d3d3824d1fab0638fba67699895eb8
- MD5 f09ec346ae97aaf8c4d6fad34d339281
- SHA1 b4af5e14dbd693e0bd1f53a4d4e3d6d83f906784
- SHA512 7f686ea0cabaa1de907f5059f848a944cd5a4c34c63a1bcf79ca9ca5b8cc0590a06d73a7eac6b8a3c16a3441c12f1b5ca18e2b972bdd0a99b66883899c4da054
- SSDEEP 3072:6ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:6ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T172847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_f09ec346ae97aaf8c4d6fad34d339281_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_f09ec346ae97aaf8c4d6fad34d339281_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_f09ec346ae97aaf8c4d6fad34d339281_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 7fc6c871b2b69b17d4de087e91da90ac40d3d3824d1fab0638fba67699895eb8
- MD5 f09ec346ae97aaf8c4d6fad34d339281
- SHA1 b4af5e14dbd693e0bd1f53a4d4e3d6d83f906784
- SHA512 7f686ea0cabaa1de907f5059f848a944cd5a4c34c63a1bcf79ca9ca5b8cc0590a06d73a7eac6b8a3c16a3441c12f1b5ca18e2b972bdd0a99b66883899c4da054
- SSDEEP 3072:6ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:6ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T172847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE