General
- Target 2026-07-15_3635d2fbf4637c177090f98696994983_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260715-vsdewahw4n
- SHA256 fbfcc91b3890a821525a0ee04f9b4523c83dc2d353c24c539261102836e5014b
- MD5 3635d2fbf4637c177090f98696994983
- SHA1 18856c844ee760abdb65405e0b31241c712f9d8f
- SHA512 ea76d1f19ace0ca1fdf4af434df23f715d8bde575dceacf53542567e8430698d322e2e3c7f072116bd3957ffa47228268641dd7871b8fc14f50e7c3ac1e000ab
- SSDEEP 3072:eViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:eViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T172847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_3635d2fbf4637c177090f98696994983_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_3635d2fbf4637c177090f98696994983_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 fbfcc91b3890a821525a0ee04f9b4523c83dc2d353c24c539261102836e5014b
- MD5 3635d2fbf4637c177090f98696994983
- SHA1 18856c844ee760abdb65405e0b31241c712f9d8f
- SHA512 ea76d1f19ace0ca1fdf4af434df23f715d8bde575dceacf53542567e8430698d322e2e3c7f072116bd3957ffa47228268641dd7871b8fc14f50e7c3ac1e000ab
- SSDEEP 3072:eViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:eViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T172847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE