General
- Target 2026-07-17_3dbdda70dda898b87c8c0c90cb64df16_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260717-hcab3ac16q
- SHA256 60df1a8bcf48f7871f233fda0c9468b95f999cabc1696d1a68a5601f84fee727
- MD5 3dbdda70dda898b87c8c0c90cb64df16
- SHA1 b7598cbde755b910c90467ba94a3b73dde44f217
- SHA512 1330a214890f667160871e6f000ce24bc1ac0d74f7af50ba83768c59c1e1741f56e74ea43ab9dadbb8316cc548d05d672413acd3bafd050e568e0e1d91d2a8fd
- SSDEEP 3072:wViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:wViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T167847C04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_3dbdda70dda898b87c8c0c90cb64df16_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-17_3dbdda70dda898b87c8c0c90cb64df16_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 60df1a8bcf48f7871f233fda0c9468b95f999cabc1696d1a68a5601f84fee727
- MD5 3dbdda70dda898b87c8c0c90cb64df16
- SHA1 b7598cbde755b910c90467ba94a3b73dde44f217
- SHA512 1330a214890f667160871e6f000ce24bc1ac0d74f7af50ba83768c59c1e1741f56e74ea43ab9dadbb8316cc548d05d672413acd3bafd050e568e0e1d91d2a8fd
- SSDEEP 3072:wViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:wViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T167847C04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE