General
- Target 2026-07-15_8b8bf85de22b15550087632a7e6d642e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260715-vdcj2acx41
- SHA256 6020b1926ba105bd6b360e5486512d336b212272f2805d4d09660b1cf0fb9cb8
- MD5 8b8bf85de22b15550087632a7e6d642e
- SHA1 ec7250343da75af3adf5a780046ac2f13b2507bb
- SHA512 3d2b5ad9fd1ece5cbcaba3d3ca43e138f2d539cecbc805da08009eb58c854e8daa026fd371385a04d7cac2017abcf55c87dd9ef8cc0302d586578203d2ada9cb
- SSDEEP 3072:AViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:AViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T156847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_8b8bf85de22b15550087632a7e6d642e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_8b8bf85de22b15550087632a7e6d642e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_8b8bf85de22b15550087632a7e6d642e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 6020b1926ba105bd6b360e5486512d336b212272f2805d4d09660b1cf0fb9cb8
- MD5 8b8bf85de22b15550087632a7e6d642e
- SHA1 ec7250343da75af3adf5a780046ac2f13b2507bb
- SHA512 3d2b5ad9fd1ece5cbcaba3d3ca43e138f2d539cecbc805da08009eb58c854e8daa026fd371385a04d7cac2017abcf55c87dd9ef8cc0302d586578203d2ada9cb
- SSDEEP 3072:AViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:AViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T156847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE