General
- Target 2026-07-19_57a96de62e20ddc62e64b492bdb053aa_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260719-vkmzcaft3n
- SHA256 90cf1b0547bf3aeed363724ec8d21ad4276ef04e3a6036d9dbc7c98608f60d3b
- MD5 57a96de62e20ddc62e64b492bdb053aa
- SHA1 738d763182bce5af690c956906a6b6a8598b6b05
- SHA512 5db7d122dd455f1fc301333031c4ee51a4cdc54dacf9c9a5539d1de8f274ea3a86fed46eca93beadba5be11952c7f100b87f7b2a25559ef89f5ca0387124aedd
- SSDEEP 3072:eViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:eViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T139847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_57a96de62e20ddc62e64b492bdb053aa_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-19_57a96de62e20ddc62e64b492bdb053aa_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 90cf1b0547bf3aeed363724ec8d21ad4276ef04e3a6036d9dbc7c98608f60d3b
- MD5 57a96de62e20ddc62e64b492bdb053aa
- SHA1 738d763182bce5af690c956906a6b6a8598b6b05
- SHA512 5db7d122dd455f1fc301333031c4ee51a4cdc54dacf9c9a5539d1de8f274ea3a86fed46eca93beadba5be11952c7f100b87f7b2a25559ef89f5ca0387124aedd
- SSDEEP 3072:eViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:eViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T139847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE